the CentOS folks have not been particularly speedy in getting a release out for quite some time. Plus the kernel is a rather small part of the OS. As a result of both of these, it's hard to attribute all (or even much) of the delay in the last release to the patch granularity