# KernelScan (kernelscan.io)

Filters Linux kernel CVEs by kernel version and build config, producing CycloneDX VEX reports of applicable exposure.

- Atlas card: https://inite.ai/en/atlas/kernelscan.io
- Site: https://kernelscan.io
- For: Device makers and security teams checking which Linux kernel CVEs actually reach their own products
- Use 0/100 · alive 100/100

## Used for

- Upload a kernel config to generate a VEX report
- Triage which kernel CVEs can reach a device
- Receive a daily digest of new CVEs affecting a product

## Price

- from 10 EUR/month, free plan (read 2026-10-20 on https://kernelscan.io/#pricing)

## For developers

- OpenAPI: https://kernelscan.io/openapi.json (74 paths)
- MCP server: io.kernelscan/kernelscan (namespace; open on 2026-10-20, 11 tools)
- Read 2026-10-20

## MCP server, measured daily

Server: https://kernelscan.io/mcp/, checked every day since 2026-10-20 (15 checks).

- Answered: 100% of daily checks
- Median first answer: 512 ms
- Sign-in: none
- Context its tool definitions take: about 4062 tokens (11 tools)
- Tool definitions: C, 70/100
- Failing "params_described": 9 of 11 tools
- Failing "annotations": 11 of 11 tools
- Warning "open_writes": create_product, update_product
- Method: https://inite.ai/en/atlas/mcp/report

## Your data

- Certifications stated: gdpr
- Read 2026-10-20

---

Source: INITE Atlas, https://inite.ai/en/atlas/kernelscan.io. JSON: https://inite.ai/api/atlas/kernelscan.io. MCP: https://inite.ai/api/mcp (atlas_lookup).