Check your Linux kernel security from two angles:

  • Configuration — kconfig, sysctl and cmdline hardening analysis, per KSPP, grsecurity, CLIP OS and CIS Benchmark.
  • Vulnerabilities — known CVEs and public exploits matched to your kernel version.
Configuration
Vulnerabilities
Where to find your kernel config file?
  • /boot/config-$(uname -r) — most common location (Debian, Ubuntu, Fedora)
  • /proc/config.gz — if kernel built with CONFIG_IKCONFIG_PROC=y, extract: zcat /proc/config.gz > my.config
  • /usr/src/linux/.config — if you compiled the kernel from source
  • ls /boot/config-* — lists available configs for installed kernels
📄

Drag & drop your .config file here or click to browse

Kconfig/Sysctl/Cmdline analysis is based on kernel-hardening-checker (GPL-3.0). CVE-by-version matching is based on linux-exploit-suggester (GPL-3.0). Your file is not stored — deleted immediately after analysis.