scripts/check-kernel-fix: recognized reserved but not published yet CVEs
    
    We have seen a large pile of CVEs that are not released yet.
    c-k-f currently says
    
    $ ./scripts/check-kernel-fix CVE-2025-37846
    Can't find sha in upstream: CVE-2025-37846.
    
    Let's check whether the said CVE is reserved and say so to make the fact
    $ ./scripts/check-kernel-fix CVE-2025-37846
    CVE-2025-37846 is reserved but not fully published