Kernel CVE MCP Server

by mattfoster

163 downloads
Not rated
GitHub

About

MCP server which reads info on Linux Kernel CVES

Details

Author
mattfoster
Downloads
163
Categories
Developer Tools

- Clones the Linux kernel CVE list git repo.
- Stores CVE data in an SQLite database.
- Provides get_kernel_cve_info tool.
- Provides search_kernel_cve_info tool.
- Uses stdio transport for MCP communication.
- Requires configuration of database file location.

Setting up with Highlight

This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:

  1. Download and install Highlight from highlightai.com/download
  2. Navigate to the plugins tab and select "Add Custom Plugin"
  3. Configure the plugin with the settings below
    Plugin Name Kernel CVE MCP Server
    Command (node, npx, python, etc.)

    Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.

  4. Enable "Start Automatically" if you want the plugin to start when Highlight launches

From the repository

First run the kernel-list-to-sqlite command to download the CVE list and populate an SQLite database. Then start the stio-mcp command with the -db flag pointing to the database file. The MCP server offers two tools: get_kernel_cve_info and search_kernel_cve_info.

Claude Desktop / Cursor

Paste into your MCP client config file to install this server.

{
    "mcpServers": {
        "kernel cve mcp server": {
            "kernel-cve-info": {
                "command": "/Users/mpf/Projects/kcve/stdio-mcp",
                "args": [
                    "-db",
                    "/Users/mpf/Projects/kcve/commits.db"
                ]
            }
        }
    }
}

McpServers

{
    "kernel-cve-info": {
        "command": "/Users/mpf/Projects/kcve/stdio-mcp",
        "args": [
            "-db",
            "/Users/mpf/Projects/kcve/commits.db"
        ]
    }
}

Kernel CVE MCP Server

This clones the linux kernel CVE List git repo, into an sqlite database and then allows querying this DB with a really basic MCP server.

See: https://lore.kernel.org/linux-cve-announce/_/text/mirror/ for details.

Commands

kernel-list-to-sqlite - Download the Kernel CVE list into a temporary dir and save the contents into an sqlite database.
stio-mcp - stdio MCP server which provides the get_kernel_cve_info and search_kernel_cve_info tools.

Config

You need to specify the location of the DB file, so use something like this:

 {
  "mcpServers": {
    "kernel-cve-info": {
      "command": "/Users/mpf/Projects/kcve/stdio-mcp",
      "args": ["-db", "/Users/mpf/Projects/kcve/commits.db"]
    }
  }
}
No reviews yet — be the first

Sign in to leave a review

Use Google, GitHub, or an email account so ratings stay tied to real people.

Email sign in

No reviews posted yet.