Linux Kernel CVE Database
Freely searchable. Sourced from NVD and kernel.org's CVE v5 git feed, AI-enriched within minutes of publication.
Look up any kernel CVE by its ID — description, severity and the stable releases that fix it — and browse the newest disclosures below. Free-text search, CVSS filters and the full history are free with an account.
| CVE ID | Severity | CVSS | Description | Introduced | Published |
|---|
A CVE list can't tell you if your kernel is affected
Most kernel CVEs sit in drivers and subsystems a given build never compiles. KernelScan checks each one against your kernel version and .config.
Only what you build
CVEs in code your .config doesn't enable are marked not affected — with the CONFIG_* reason attached.
Fixed in your version?
Fix status is resolved per stable branch, so a fix that only landed upstream doesn't count as fixed for your LTS.
A VEX you can hand on
The result is a CycloneDX VEX document — the format customers and the EU Cyber Resilience Act ask for.
Free tier · no credit card · no invitation needed
Candidate — the Linux kernel CNA has not assigned a CVE for this fix yet.
A KernelScan pre-CVE is a kernel fix that the Linux kernel CNA's reviewers have nominated for a CVE. The KernelScan Engine assesses it before the CVE is published, so its scores are provisional.
| ID | Severity | CVSS | Description | Introduced | Nominated | Fixed in | Votes | Likelihood |
|---|
Pre-CVE candidates are available on the Basic plan and above.
Upgrade to BasicCandidates could not be loaded. Please try again later.
| ID | Severity | CVSS | Description | Introduced | Nominated | Fixed in | Votes | Likelihood |
|---|