Making Linux kernel vulnerabilities easier to understand.
KernelCVE.org is an independently operated, non-commercial project that publishes Linux kernel CVE analysis. Its AL-KERNEL pipeline combines automated investigation, machine-learning signals, and large-language-model analysis to help readers assess technical impact and prioritize further review.
What you can find here
Linux kernel CVE reports
Browse published vulnerability analyses in the public archive.
Automated technical assessment
Explore assessments produced with an evolving combination of neural-network and LLM-assisted analysis.
Transparent methodology
Read about the project's architecture and analysis pipeline, and explore ActionableScore (AS), an experimental evidence-driven metric for Linux kernel vulnerability triage. Download the AS PDF ↗
Automated assessments are research aids, not authoritative vendor severity ratings or substitutes for independent security review.
If this resource helps you, could you spare $10 to keep it running?
I'm the person who builds and maintains KernelCVE.org. This site is not a commercial business. I have kept it available using my own money because I believe publicly accessible kernel security research matters.
The server is paid through July 2027, but I cannot confidently fund another year of hosting. On top of that, the AI tokens used for vulnerability analysis cost me approximately $500 every month. I have continued covering these expenses personally, but I am reaching the point where I may no longer be able to.
Asking for financial help is very difficult for me. I am not accustomed to it, and I have never publicly asked for donations before. But my family circumstances have made continuing this project alone increasingly difficult.
Over the last several years, I have spent tens of thousands of dollars helping my younger daughter through a prolonged legal and medical dispute. This year alone, legal fees exceeded 100,000 Israeli shekels (approximately US $32,600 at an October 2026 exchange rate), much of which I had to find within less than six months. The central legal outcome has been positive: my daughter's earlier psychiatric classification was reconsidered and she has since been assessed as having high-functioning autism. I believe this has removed the immediate threat of indefinite psychiatric institutionalization under the earlier diagnosis. However, continued legal representation and advocacy remain necessary, and the expenses have left me with substantial debt.
I have tried to improve my financial situation through my regular employment, including requesting a raise. I had also expected an equity award that was discussed earlier in the year, but it ultimately did not materialize. I am doing what I can to manage the resulting debt and keep this project alive.
If KernelCVE.org has been useful to you, please consider donating around $10. Any amount helps. Contributions will help me continue paying for the server and the AI analysis needed to maintain this free resource. If you cannot donate, sharing the site with someone who might benefit from it is also greatly appreciated.
This is a personal appeal from the independent maintainer, not a claim of registered charity status. Donations are voluntary; access to the CVE archive remains free.