[sairamkunala]

Intel (the chipmaker) uses the linux kernel to fix flaws found in the hardware. see if you can identify who would want the ownership around that.

https://www.kernel.org/doc/html/latest/x86/microcode.html

Look at the specification. If something does not behave as expected, that entity is the owner. In case of Intel processor vulnerabilities and other ones, the hardware is the fault as per my understanding.

Since you are asking about software vulnerabilities and since a vulnerability is supposed to be fixed, the onus is on the provider to fix it, but the IP could be owned by the hacker. Its a vulnerability if its known the company. If not, its an exploit the hacker can use.