Found my old commit to cvehound. Nice tool to scan your linux kernel sources dump for known CVEs.

It uses Coccinelle which is SmPL (Semantic Patch Language)
and is used in Linux kernel as official tool as well.

Btw, it's also a project as "coccinelle-for-rust" for Rust integration in Linux kernel,
which needs further support.
pahole for rust also needs more support for rust-in-linux kernel integration 👀
Best Bluetooth Speaker Sound Quality