linux-cve-checker

A Go CLI tool that checks a running Linux system for known kernel CVE vulnerabilities and reports whether the system is safe, vulnerable, or unknown.

Build

make build          # dynamic build (local dev)
make build-static   # fully static build (CGO_ENABLED=0)

Usage

./linux-cve-checker                 # readable output (default)
./linux-cve-checker -format json    # JSON output

Exit code is 0 if the verdict is safe, otherwise 1.

Currently checked CVEs

• CVE-2026-31431 (CopyfailChecker)

Development

make test   # run all tests
make vet    # go vet ./...
make fmt    # go fmt ./...