Testing?
"Except that March update didn't fully seal the deal: the bug remained in the kernel, and was exploitable by malicious software and users."
Did they even test if the update worked then? I mean you make a patch, surely you should check to see if it did what you wanted it to do?