Linux Kernel Pre-CVE Database
Kernel fixes nominated for a CVE, assessed by KernelScan before the CVE is published.
Kernel fixes the Linux kernel CNA has nominated for a CVE that is not published yet, assessed by KernelScan ahead of publication. The three highest-scored are below in full; every open candidate is included in the Basic plan and above.
| CVE ID | Severity | CVSS | Description | Introduced | Published |
|---|
A CVE list can't tell you if your kernel is affected
Most kernel CVEs sit in drivers and subsystems a given build never compiles. KernelScan checks each one against your kernel version and .config.
Only what you build
CVEs in code your .config doesn't enable are marked not affected — with the CONFIG_* reason attached.
Fixed in your version?
Fix status is resolved per stable branch, so a fix that only landed upstream doesn't count as fixed for your LTS.
A VEX you can hand on
The result is a CycloneDX VEX document — the format customers and the EU Cyber Resilience Act ask for.
Free tier · no credit card · no invitation needed
Candidate — the Linux kernel CNA has not assigned a CVE for this fix yet.
A KernelScan pre-CVE is a kernel fix that the Linux kernel CNA's reviewers have nominated for a CVE. The KernelScan Engine assesses it before the CVE is published, so its scores are provisional.
| ID | Severity | CVSS | Description | Introduced | Nominated | Fixed in | Votes | Likelihood |
|---|---|---|---|---|---|---|---|---|
| KSCAN-PRE-CVE-0943 — nfsd FlexFileLayout AuthBypass | CRITICAL | 9.8 | NFSD: Map flex file layout IDs through the request's user namespace | v4.8 | 2026-11-07 | v7.3.2 | 1 | 95% |
| KSCAN-PRE-CVE-0894 — mptcp SubflowReq UAF | CRITICAL | 9.8 | mptcp: hold MP_JOIN msk ref when cloning reqsk | v5.14 | 2026-11-07 | v7.3.2 | 1 | 98% |
| KSCAN-PRE-CVE-0850 — smb NTransact Overflow | CRITICAL | 9.8 | smb: client: validate NT transaction response layout and offsets | v2.6.16 | 2026-11-07 | v7.3.2 | 1 | 95% |
Pre-CVE candidates are available on the Basic plan and above.
Upgrade to BasicCandidates could not be loaded. Please try again later.
| ID | Severity | CVSS | Description | Introduced | Nominated | Fixed in | Votes | Likelihood |
|---|