> But yes I agree it seems strange that most posts/articles/etc. are not prominently giving out mitigation strategies.

Probably because most linux workloads these days run on containers where the orchestrator dynamically create some firewall rules and where these vuln could be used to jump from on compromised container to another or the host. In these case it is rather complicated to instruct all your users on how to implement these mitigations depending on the orchestrator, firewall used, etc. Much easier to patch.