linux-exploit-suggester

./linux-exploit-suggester.sh -k $(uname -r)

Cross-references the Linux kernel version against a local database of known exploits (CVE-2022-0847, CVE-2021-4034, etc.) and lists viable candidates for privilege escalation, with links to details.

When you already know the kernel version (uname -r) and want to check for applicable public exploits. It's the first question you ask on a Linux host with no clear sudo or SUID vectors. The -c mode lists only CVEs and -i lets you filter interactively by architecture and kernel.

If the host has a recent, patched kernel, the results will be poor: don't waste time and check configurations (sudo, SUID, capabilities) first. It's also not the tool for custom or enterprise-distribution patched kernels without standard signing: candidates may fail.