Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,682 published records · 18 KEV · 3,682 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,682 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2155.8%
High97827%
Med1,75848%
Low1233.3%
None30.08%
Legacy00.00%
Unscored60516%

Matching records by UTC month

Jun 253,682

Signal coverage

KEV-listed: 18
With a forecast: 3,682
Unknown date: 0
Unscored severity: 605

Share of cohort: KEV 0.49% · forecast 100% · unscored 16%.

Showing 1421–1440 of 3,682By severity band: Critical · 9.0–10.0 215, High · 7.0–8.9 978, Medium · 4.0–6.9 1,758, Low · 0.1–3.9 123, None · scored 0.0 3, Legacy · v2 only 0, Unscored · no CNA metric 605

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50039

stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove()

In the Linux kernel, the following vulnerability has been resolved: stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove() Commit 09f012e64e4b ("stmmac: intel: Fix clock handling on error and remove paths") removed this clk_disable_unprepare() This was partly revert by commit ac322f86b56…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:40.500Z. Updated 2026-05-23T15:23:34.463Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:23 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50038

drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors()

In the Linux kernel, the following vulnerability has been resolved: drm/meson: Fix refcount bugs in meson_vpu_has_available_connectors() In this function, there are two refcount leak bugs: (1) when breaking out of for_each_endpoint_of_node(), we need call the of_node_put() for the 'ep'; (2) we should call of_node_put…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 1421 to 1440 of 3682.First page Next page

Published 2025-06-18T11:01:39.487Z. Updated 2026-05-11T19:11:38.648Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50037

drm/i915/ttm: don't leak the ccs state

In the Linux kernel, the following vulnerability has been resolved: drm/i915/ttm: don't leak the ccs state The kernel only manages the ccs state with lmem-only objects, however the kernel should still take care not to leak the CCS state from the previous user. (cherry picked from commit 353819d85f87be46aeb9c1dd929d4…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:38.534Z. Updated 2026-05-11T19:11:37.452Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50036

drm/sun4i: dsi: Prevent underflow when computing packet sizes

In the Linux kernel, the following vulnerability has been resolved: drm/sun4i: dsi: Prevent underflow when computing packet sizes Currently, the packet overhead is subtracted using unsigned arithmetic. With a short sync pulse, this could underflow and wrap around to near the maximal u16 value. Fix this by using signe…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:37.844Z. Updated 2026-05-11T19:11:36.324Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record

HighPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50035

drm/amdgpu: Fix use-after-free on amdgpu_bo_list mutex

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix use-after-free on amdgpu_bo_list mutex If amdgpu_cs_vm_handling returns r != 0, then it will unlock the bo_list_mutex inside the function amdgpu_cs_vm_handling and again on amdgpu_cs_parser_fini. This problem results in the following …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:37.123Z. Updated 2026-08-05T08:57:13.064Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 15:57 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50034

usb: cdns3 fix use-after-free at workaround 2

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3 fix use-after-free at workaround 2 BUG: KFENCE: use-after-free read in __list_del_entry_valid+0x10/0xac cdns3_wa2_remove_old_request() { ... kfree(priv_req->request.buf); cdns3_gadget_ep_free_request(&priv_ep->endpoint, &priv_req->requ…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:36.435Z. Updated 2026-08-15T12:23:09.956Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Aug 2026, 19:23 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50033

usb: host: ohci-ppc-of: Fix refcount leak bug

In the Linux kernel, the following vulnerability has been resolved: usb: host: ohci-ppc-of: Fix refcount leak bug In ohci_hcd_ppc_of_probe(), of_find_compatible_node() will return a node pointer with refcount incremented. We should use of_node_put() when it is not used anymore.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:35.679Z. Updated 2026-05-11T19:11:31.681Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50032

usb: renesas: Fix refcount leak bug

In the Linux kernel, the following vulnerability has been resolved: usb: renesas: Fix refcount leak bug In usbhs_rza1_hardware_init(), of_find_node_by_name() will return a node pointer with refcount incremented. We should use of_node_put() when it is not used anymore.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:34.767Z. Updated 2026-05-11T19:11:26.820Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50030

scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input Malformed user input to debugfs results in buffer overflow crashes. Adapt input string lengths to fit within internal buffers, leaving space for NULL terminators.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:33.345Z. Updated 2026-05-11T19:11:25.645Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50029

clk: qcom: ipq8074: dont disable gcc_sleep_clk_src

In the Linux kernel, the following vulnerability has been resolved: clk: qcom: ipq8074: dont disable gcc_sleep_clk_src Once the usb sleep clocks are disabled, clock framework is trying to disable the sleep clock source also. However, it seems that it cannot be disabled and trying to do so produces: [ 245.436390] --…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:32.210Z. Updated 2026-05-11T19:11:24.476Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record

HighPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50028

gadgetfs: ep_io - wait until IRQ finishes

In the Linux kernel, the following vulnerability has been resolved: gadgetfs: ep_io - wait until IRQ finishes after usb_ep_queue() if wait_for_completion_interruptible() is interrupted we need to wait until IRQ gets finished. Otherwise complete() from epio_complete() can corrupt stack.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:31.293Z. Updated 2026-08-05T08:57:11.979Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 15:57 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50027

scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE There is no corresponding free routine if lpfc_sli4_issue_wqe fails to issue the CMF WQE in lpfc_issue_cmf_sync_wqe. If ret_val is non-zero, then free the iocbq request structure.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:30.485Z. Updated 2026-05-11T19:11:22.172Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50026

habanalabs/gaudi: fix shift out of bounds

In the Linux kernel, the following vulnerability has been resolved: habanalabs/gaudi: fix shift out of bounds When validating NIC queues, queue offset calculation must be performed only for NIC queues.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:29.650Z. Updated 2026-08-15T12:23:08.856Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Aug 2026, 19:23 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50025

cxl: Fix a memory leak in an error handling path

In the Linux kernel, the following vulnerability has been resolved: cxl: Fix a memory leak in an error handling path A bitmap_zalloc() must be balanced by a corresponding bitmap_free() in the error handling path of afu_allocate_irqs().

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:28.816Z. Updated 2026-05-11T19:11:19.747Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50024

dmaengine: dw-axi-dmac: do not print NULL LLI during error

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-axi-dmac: do not print NULL LLI during error During debugging we have seen an issue where axi_chan_dump_lli() is passed a NULL LLI pointer which ends up causing an OOPS due to trying to get fields from it. Simply print NULL LLI and exit…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:27.959Z. Updated 2026-05-11T19:11:18.634Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50023

dmaengine: dw-axi-dmac: ignore interrupt if no descriptor

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-axi-dmac: ignore interrupt if no descriptor If the channel has no descriptor and the interrupt is raised then the kernel will OOPS. Check the result of vchan_next_desc() in the handler axi_chan_block_xfer_complete() to avoid the error h…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:26.869Z. Updated 2026-05-11T19:11:17.492Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record

HighPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50022

drivers:md:fix a potential use-after-free bug

In the Linux kernel, the following vulnerability has been resolved: drivers:md:fix a potential use-after-free bug In line 2884, "raid5_release_stripe(sh);" drops the reference to sh and may cause sh to be released. However, sh is subsequently used in lines 2886 "if (sh->batch_head && sh != sh->batch_head)". This may …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:25.965Z. Updated 2026-08-05T08:57:10.904Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 15:57 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50021

ext4: block range must be validated before use in ext4_mb_clear_bb()

In the Linux kernel, the following vulnerability has been resolved: ext4: block range must be validated before use in ext4_mb_clear_bb() Block range to free is validated in ext4_free_blocks() using ext4_inode_block_valid() and then it's passed to ext4_mb_clear_bb(). However in some situations on bigalloc file system …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:25.045Z. Updated 2026-05-11T19:11:15.182Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50020

ext4: avoid resizing to a partial cluster size

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid resizing to a partial cluster size This patch avoids an attempt to resize the filesystem to an unaligned cluster boundary. An online resize to a size that is not integral to cluster size results in the last iteration attempting to grow t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:24.227Z. Updated 2026-05-11T19:11:14.053Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:01 WIB

CVE-2022-50019

tty: serial: Fix refcount leak bug in ucc_uart.c

In the Linux kernel, the following vulnerability has been resolved: tty: serial: Fix refcount leak bug in ucc_uart.c In soc_info(), of_find_node_by_type() will return a node pointer with refcount incremented. We should use of_node_put() when it is not used anymore.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:01:23.332Z. Updated 2026-05-11T19:11:12.898Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:11 WIB

Official record