When looking at vulnerabilities there seem to be positives for this https://ubuntu.com/security/CVE-2022-28653 which is indeed correct, however ubuntu has chosen to ignore, have there been any discussions about the possibility to mute/silent/ack some CVE's that will never get fixed?

Hi @Kiranos! That's the right issue from our end. It hasn't been brought into a sprint yet, but I'd keep an eye on it to see any movement.