Show HN: Kernel-Cve(kernelcve.com)
kernelcve.com
Show HN: Kernel-Cve
https://www.kernelcve.com/
1 comments
This highlights a gap people often miss: LTS doesn’t mean “no known CVEs,” it usually means “backported fixes with different semantics.” Having this laid out per kernel version is genuinely useful for risk assessment.
Not too long ago, I learned that longterm Linux kernels contain a lot of known and unpatched CVEs, in hindsight this makes sense, I was just a bit surprised at the time.
Long story short, I've made a website that lists all the known CVEs for all kernel versions since 2.6.11.
It makes use of the output of tooling provided by the kernel maintainers, so the list of CVEs should be accurate.
The system has an API that's documented under the 'Docs' section.
Let me know if you find this useful and how I can improve it or add features.
Cheers