ebpf-digest

Most security feeds are broad and noisy. ebpf-digest tracks exactly two things: Linux kernel CVEs tagged to the BPF subsystem, and cilium/ebpf GitHub releases. eBPF verifier bugs are a recurring real privilege-escalation vector, and no dedicated feed for them currently exists.

What it tracks

• BPF-subsystem CVEs – pulled from NVD’s API, keyword-filtered on bpf/eBPF.
• cilium/ebpf releases – breaking API changes in the Go library that goebpf and similar tools depend on.

Checked daily. Each new entry is idempotently tracked, so you only ever see it once.

Get it

• Free – browse the digest or subscribe to its RSS/Atom feed and check whenever suits you.

Status

The ebpf-digest CLI’s check command polls NVD and cilium/ebpf releases and publishes new entries here.