Capabilities

Linux Kernel

Linux kernel archive and module analysis and vulnerability scanning capabilities

Package analysis

Cataloger + EvidencePackage URL TypeLicenseDependenciesPackage Manager Claims
DepthEdgesKindsFilesDigestsIntegrity Hash
linux-kernel-cataloger
kernel, kernel-*, vmlinux, vmlinux-*, vmlinuz, vmlinuz-*, bzImage, bzImage-*, zImage, zImage-*, lib/modules/**/*.ko, lib/modules/**/*.ko.gz, lib/modules/**/*.ko.xz, lib/modules/**/*.ko.zst
pkg:generic
pkg:generic/linux-kernel

Syft Configuration
Configuration KeyDescription
linux-kernel.catalog-modulesEnables cataloging linux kernel modules (*.ko and compressed *.ko.gz, *.ko.xz, *.ko.zst files) in addition to the kernel itself.

Vulnerability scanning

Data SourceDisclosuresFixesTrack by
Source
Package
AffectedDateVersionsDate
National Vulnerability Database (NVD)

Grype Configuration
Configuration KeyDescription
match.stock.using-cpesUse CPE package identifiers to find vulnerabilities

Next steps