Repo for tracking and maintaining the CVE identifiers reserved and assigned to the Linux kernel project. For any questions about the CVE process that Linux follows, please see the file, Documentation/process/cve.rst in the kernel source tree. To get announcements of all assigned CVEs, please subscribe to the linux-announce-cve mailing list on vger.kernel.org, or see the web archive here: https://lore.kernel.org/linux-cve-announce/ Note that in the future, this repo might also track other security identifiers, as they are created / mandated by different government agencies. LICENSES The license for the data for CVE information in this repo is under the CVE-ToU license, as described at: https://www.cve.org/Legal/TermsOfUse and copied in the LICENSES/cve-tou.txt file in this repository. The files in the scripts/ directory are licensed under the GPL-v2-only license, as documented in the files themselves.