Currently it's waiting on DataDrake to build and push them. She's been busy with the Solus reorganization and moving apartments otherwise she would have done so by now.
Also, many of the Solus maintainers are subscribed to kernel security advisories. If there was some truly critical CVE we'd backport the fix to 5.14.