cve-kernel-linux

Ecosystem branch for Linux kernel and kernel-module CVEs. Covers syscall surface, driver bugs, ring-0 heap analysis, and KASAN/kconfig build patterns. Distinct from cve-memory-linux because kernel exploitation has fundamentally different mitigations and tooling (SMEP/SMAP, KASLR, KPTI, lockdown).