Well put.

However, I'd add that what sucks even more is that this is not just a kernel issue. Every single application needs to worry about this.

In this particular instance, the vulnerability is caused by git not handling aliased names correctly.