add support to provide multiple CVE numbers

[marcosps]

With multiple CVEs klp-build could check for multiple patches on kernel-source, thus making it more capable of handling codestreams that needs multiples CVEs for the same code path.