Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,682 published records · 18 KEV · 3,682 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,682 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2155.8%
High97827%
Med1,75848%
Low1233.3%
None30.08%
Legacy00.00%
Unscored60516%

Matching records by UTC month

Jun 253,682

Signal coverage

KEV-listed: 18
With a forecast: 3,682
Unknown date: 0
Unscored severity: 605

Share of cohort: KEV 0.49% · forecast 100% · unscored 16%.

Showing 1401–1420 of 3,682By severity band: Critical · 9.0–10.0 215, High · 7.0–8.9 978, Medium · 4.0–6.9 1,758, Low · 0.1–3.9 123, None · scored 0.0 3, Legacy · v2 only 0, Unscored · no CNA metric 605

HighPublished 18 Jun 2025, 18:02 WIB

CVE-2022-50059

ceph: don't leak snap_rwsem in handle_cap_grant

In the Linux kernel, the following vulnerability has been resolved: ceph: don't leak snap_rwsem in handle_cap_grant When handle_cap_grant is called on an IMPORT op, then the snap_rwsem is held and the function is expected to release it before returning. It currently fails to do that in all cases which could lead to a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:02:07.945Z. Updated 2026-10-15T21:31:18.312Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 04:31 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:02 WIB

CVE-2022-50058

vdpa_sim_blk: set number of address spaces and virtqueue groups

In the Linux kernel, the following vulnerability has been resolved: vdpa_sim_blk: set number of address spaces and virtqueue groups Commit bda324fd037a ("vdpasim: control virtqueue support") added two new fields (nas, ngroups) to vdpasim_dev_attr, but we forgot to initialize them for vdpa_sim_blk. When creating a ne…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 1401 to 1420 of 3682.First page Next page

Published 2025-06-18T11:02:06.988Z. Updated 2026-05-11T19:12:02.846Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:12 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:02 WIB

CVE-2022-50057

fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix NULL deref in ntfs_update_mftmirr If ntfs_fill_super() wasn't called then sbi->sb will be equal to NULL. Code should check this ptr before dereferencing. Syzbot hit this issue via passing wrong mount param as can be seen from log below …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:02:06.357Z. Updated 2026-05-11T19:12:01.024Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:12 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:02 WIB

CVE-2022-50056

fs/ntfs3: Fix missing i_op in ntfs_read_mft

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix missing i_op in ntfs_read_mft There is null pointer dereference because i_op == NULL. The bug happens because we don't initialize i_op for records in $Extend.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:02:00.631Z. Updated 2026-05-11T19:11:59.758Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50055

iavf: Fix adminq error handling

In the Linux kernel, the following vulnerability has been resolved: iavf: Fix adminq error handling iavf_alloc_asq_bufs/iavf_alloc_arq_bufs allocates with dma_alloc_coherent memory for VF mailbox. Free DMA regions for both ASQ and ARQ in case error happens during configuration of ASQ/ARQ registers. Without this chang…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:59.568Z. Updated 2026-05-11T19:11:58.564Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50054

iavf: Fix NULL pointer dereference in iavf_get_link_ksettings

In the Linux kernel, the following vulnerability has been resolved: iavf: Fix NULL pointer dereference in iavf_get_link_ksettings Fix possible NULL pointer dereference, due to freeing of adapter->vf_res in iavf_init_get_resources. Previous commit introduced a regression, where receiving IAVF_ERR_ADMIN_QUEUE_NO_WORK f…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:58.769Z. Updated 2026-05-11T19:11:57.430Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50053

iavf: Fix reset error handling

In the Linux kernel, the following vulnerability has been resolved: iavf: Fix reset error handling Do not call iavf_close in iavf_reset_task error handling. Doing so can lead to double call of napi_disable, which can lead to deadlock there. Removing VF would lead to iavf_remove task being stuck, because it requires c…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:58.164Z. Updated 2026-05-11T19:11:56.277Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50052

ASoC: Intel: avs: Fix potential buffer overflow by snprintf()

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix potential buffer overflow by snprintf() snprintf() returns the would-be-filled size when the string overflows the given buffer size, hence using this value may result in a buffer overflow (although it's unrealistic). This patch…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:52.478Z. Updated 2026-05-11T19:11:55.123Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50051

ASoC: SOF: debug: Fix potential buffer overflow by snprintf()

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: debug: Fix potential buffer overflow by snprintf() snprintf() returns the would-be-filled size when the string overflows the given buffer size, hence using this value may result in the buffer overflow (although it's unrealistic). This pat…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:51.560Z. Updated 2026-05-11T19:11:53.971Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50050

ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf()

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: Intel: hda: Fix potential buffer overflow by snprintf() snprintf() returns the would-be-filled size when the string overflows the given buffer size, hence using this value may result in the buffer overflow (although it's unrealistic). Thi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:50.642Z. Updated 2026-05-11T19:11:52.830Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50049

ASoC: DPCM: Don't pick up BE without substream

In the Linux kernel, the following vulnerability has been resolved: ASoC: DPCM: Don't pick up BE without substream When DPCM tries to add valid BE connections at dpcm_add_paths(), it doesn't check whether the picked BE actually supports for the given stream direction. Due to that, when an asymmetric BE stream is pre…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:49.810Z. Updated 2026-05-11T19:11:51.703Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record

HighPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50048

netfilter: nf_tables: possible module reference underflow in error path

In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: possible module reference underflow in error path dst->ops is set on when nft_expr_clone() fails, but module refcount has not been bumped yet, therefore nft_expr_destroy() leads to module reference underflow.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:48.893Z. Updated 2026-08-05T08:57:14.148Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 15:57 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50047

net: dsa: mv88e6060: prevent crash on an unused port

In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6060: prevent crash on an unused port If the port isn't a CPU port nor a user port, 'cpu_dp' is a null pointer and a crash happened on dereferencing it in mv88e6060_setup_port(): [ 9.575872] Unable to handle kernel NULL pointer der…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:48.080Z. Updated 2026-05-11T19:11:49.306Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50046

net/sunrpc: fix potential memory leaks in rpc_sysfs_xprt_state_change()

In the Linux kernel, the following vulnerability has been resolved: net/sunrpc: fix potential memory leaks in rpc_sysfs_xprt_state_change() The issue happens on some error handling paths. When the function fails to grab the object `xprt`, it simply returns 0, forgetting to decrease the reference count of another obje…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:47.155Z. Updated 2026-05-11T19:11:48.153Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50045

powerpc/pci: Fix get_phb_number() locking

In the Linux kernel, the following vulnerability has been resolved: powerpc/pci: Fix get_phb_number() locking The recent change to get_phb_number() causes a DEBUG_ATOMIC_SLEEP warning on some systems: BUG: sleeping function called from invalid context at kernel/locking/mutex.c:580 in_atomic(): 1, irqs_disabled()…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:46.233Z. Updated 2026-05-23T15:23:36.551Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:23 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50044

net: qrtr: start MHI channel after endpoit creation

In the Linux kernel, the following vulnerability has been resolved: net: qrtr: start MHI channel after endpoit creation MHI channel may generates event/interrupt right after enabling. It may leads to 2 race conditions issues. 1) Such event may be dropped by qcom_mhi_qrtr_dl_callback() at check: if (!qdev || mhi_re…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:45.296Z. Updated 2026-05-11T19:11:45.868Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50043

net: fix potential refcount leak in ndisc_router_discovery()

In the Linux kernel, the following vulnerability has been resolved: net: fix potential refcount leak in ndisc_router_discovery() The issue happens on specific paths in the function. After both the object `rt` and `neigh` are grabbed successfully, when `lifetime` is nonzero but the metric needs change, the function ju…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:44.186Z. Updated 2026-05-11T19:11:44.374Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50042

net: genl: fix error path memory leak in policy dumping

In the Linux kernel, the following vulnerability has been resolved: net: genl: fix error path memory leak in policy dumping If construction of the array of policies fails when recording non-first policy we need to unwind. netlink_policy_dump_add_policy() itself also needs fixing as it currently gives up on error wit…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:43.264Z. Updated 2026-05-11T19:11:43.271Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50041

ice: Fix call trace with null VSI during VF reset

In the Linux kernel, the following vulnerability has been resolved: ice: Fix call trace with null VSI during VF reset During stress test with attaching and detaching VF from KVM and simultaneously changing VFs spoofcheck and trust there was a call trace in ice_reset_vf that VF's VSI is null. [145237.352797] WARNING:…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:42.544Z. Updated 2026-05-23T15:23:35.498Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:23 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50040

net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions()

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions() If an error occurs in dsa_devlink_region_create(), then 'priv->regions' array will be accessed by negative index '-1'. Found by Linux Verification Center (linuxtesting.org) wi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:41.420Z. Updated 2026-05-11T19:11:40.894Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record