Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,682 published records · 18 KEV · 3,682 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,682 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2155.8%
High97827%
Med1,75848%
Low1233.3%
None30.08%
Legacy00.00%
Unscored60516%

Matching records by UTC month

Jun 253,682

Signal coverage

KEV-listed: 18
With a forecast: 3,682
Unknown date: 0
Unscored severity: 605

Share of cohort: KEV 0.49% · forecast 100% · unscored 16%.

Showing 1481–1500 of 3,682By severity band: Critical · 9.0–10.0 215, High · 7.0–8.9 978, Medium · 4.0–6.9 1,758, Low · 0.1–3.9 123, None · scored 0.0 3, Legacy · v2 only 0, Unscored · no CNA metric 605

UnscoredPublished 18 Jun 2025, 18:00 WIB

CVE-2022-49976

platform/x86: x86-android-tablets: Fix broken touchscreen on Chuwi Hi8 with Windows BIOS

In the Linux kernel, the following vulnerability has been resolved: platform/x86: x86-android-tablets: Fix broken touchscreen on Chuwi Hi8 with Windows BIOS The x86-android-tablets handling for the Chuwi Hi8 is only necessary with the Android BIOS and it is causing problems with the Windows BIOS version. Specificall…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:00:38.959Z. Updated 2026-05-11T19:10:20.310Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:10 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:00 WIB

CVE-2022-49975

bpf: Don't redirect packets with invalid pkt_len

In the Linux kernel, the following vulnerability has been resolved: bpf: Don't redirect packets with invalid pkt_len Syzbot found an issue [1]: fq_codel_drop() try to drop a flow whitout any skbs, that is, the flow->head is null. The root cause, as the [2] says, is because that bpf_prog_test_run_skb() run a bpf prog …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 1481 to 1500 of 3682.First page Next page

Published 2025-06-18T11:00:38.157Z. Updated 2026-05-11T19:10:19.182Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:10 WIB

Official record

HighPublished 18 Jun 2025, 18:00 WIB

CVE-2022-49974

HID: nintendo: fix rumble worker null pointer deref

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: fix rumble worker null pointer deref We can dereference a null pointer trying to queue work to a destroyed workqueue. If the device is disconnected, nintendo_hid_remove is called, in which the rumble_queue is destroyed. Avoid using th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:00:37.224Z. Updated 2026-08-15T12:23:02.248Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated15 Aug 2026, 19:23 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:00 WIB

CVE-2022-49973

skmsg: Fix wrong last sg check in sk_msg_recvmsg()

In the Linux kernel, the following vulnerability has been resolved: skmsg: Fix wrong last sg check in sk_msg_recvmsg() Fix one kernel NULL pointer dereference as below: [ 224.462334] Call Trace: [ 224.462394] __tcp_bpf_recvmsg+0xd3/0x380 [ 224.462441] ? sock_has_perm+0x78/0xa0 [ 224.462463] tcp_bpf_recvmsg+0x…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:00:36.303Z. Updated 2026-05-23T15:23:27.189Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:23 WIB

Official record

HighPublished 18 Jun 2025, 18:00 WIB

CVE-2022-49972

xsk: Fix corrupted packets for XDP_SHARED_UMEM

In the Linux kernel, the following vulnerability has been resolved: xsk: Fix corrupted packets for XDP_SHARED_UMEM Fix an issue in XDP_SHARED_UMEM mode together with aligned mode where packets are corrupted for the second and any further sockets bound to the same umem. In other words, this does not affect the first s…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:00:35.382Z. Updated 2026-10-15T21:31:17.861Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 04:31 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:00 WIB

CVE-2022-49971

drm/amd/pm: Fix a potential gpu_metrics_table memory leak

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Fix a potential gpu_metrics_table memory leak Memory is allocated for gpu_metrics_table in smu_v13_0_4_init_smc_tables(), but not freed in smu_v13_0_4_fini_smc_tables(). This may cause memory leaks, fix it.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:00:34.649Z. Updated 2026-05-11T19:10:14.560Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:10 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:00 WIB

CVE-2022-49970

bpf, cgroup: Fix kernel BUG in purge_effective_progs

In the Linux kernel, the following vulnerability has been resolved: bpf, cgroup: Fix kernel BUG in purge_effective_progs Syzkaller reported a triggered kernel BUG as follows: ------------[ cut here ]------------ kernel BUG at kernel/bpf/cgroup.c:925! invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 1 PID: 19…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:00:33.934Z. Updated 2026-05-23T15:23:26.175Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:23 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:00 WIB

CVE-2022-49969

drm/amd/display: clear optc underflow before turn off odm clock

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: clear optc underflow before turn off odm clock [Why] After ODM clock off, optc underflow bit will be kept there always and clear not work. We need to clear that before clock off. [How] Clear that if have when clock off.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:00:33.226Z. Updated 2026-08-15T12:23:01.163Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Aug 2026, 19:23 WIB

Official record

HighPublished 18 Jun 2025, 18:00 WIB

CVE-2022-49968

ieee802154/adf7242: defer destroy_workqueue call

In the Linux kernel, the following vulnerability has been resolved: ieee802154/adf7242: defer destroy_workqueue call There is a possible race condition (use-after-free) like below (FREE) | (USE) adf7242_remove | adf7242_channel cancel_delayed_work_sync | destroy_workqueu…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:00:32.443Z. Updated 2026-08-05T08:56:55.772Z.

CVSS8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 15:56 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:00 WIB

CVE-2022-49967

bpf: Fix a data-race around bpf_jit_limit.

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a data-race around bpf_jit_limit. While reading bpf_jit_limit, it can be changed concurrently via sysctl, WRITE_ONCE() in __do_proc_doulongvec_minmax(). The size of bpf_jit_limit is long, so we need to add a paired READ_ONCE() to avoid load-…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:00:31.782Z. Updated 2026-05-23T15:23:23.987Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:23 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:00 WIB

CVE-2022-49966

drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: add missing ->fini_microcode interface for Sienna Cichlid To avoid any potential memory leak.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:00:31.078Z. Updated 2026-08-15T12:23:00.075Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Aug 2026, 19:23 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:00 WIB

CVE-2022-49965

drm/amd/pm: add missing ->fini_xxxx interfaces for some SMU13 asics

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: add missing ->fini_xxxx interfaces for some SMU13 asics Without these, potential memory leak may be induced.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:00:30.391Z. Updated 2026-05-11T19:10:07.639Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:10 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:00 WIB

CVE-2022-49964

arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level

In the Linux kernel, the following vulnerability has been resolved: arm64: cacheinfo: Fix incorrect assignment of signed error value to unsigned fw_level Though acpi_find_last_cache_level() always returned signed value and the document states it will return any errors caused by lack of a PPTT table, it never returned…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:00:29.710Z. Updated 2026-05-11T19:10:06.395Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:10 WIB

Official record

HighPublished 18 Jun 2025, 18:00 WIB

CVE-2022-49963

drm/i915/ttm: fix CCS handling

In the Linux kernel, the following vulnerability has been resolved: drm/i915/ttm: fix CCS handling Crucible + recent Mesa seems to sometimes hit: GEM_BUG_ON(num_ccs_blks > NUM_CCS_BLKS_PER_XFER) And it looks like we can also trigger this with gem_lmem_swapping, if we modify the test to use slightly larger object si…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:00:24.021Z. Updated 2026-10-15T21:31:17.741Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 04:31 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:00 WIB

CVE-2022-49962

xhci: Fix null pointer dereference in remove if xHC has only one roothub

In the Linux kernel, the following vulnerability has been resolved: xhci: Fix null pointer dereference in remove if xHC has only one roothub The remove path in xhci platform driver tries to remove and put both main and shared hcds even if only a main hcd exists (one roothub) This causes a null pointer dereference in…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:00:23.321Z. Updated 2026-05-11T19:10:03.833Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:10 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:00 WIB

CVE-2022-49961

bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO

In the Linux kernel, the following vulnerability has been resolved: bpf: Do mark_chain_precision for ARG_CONST_ALLOC_SIZE_OR_ZERO Precision markers need to be propagated whenever we have an ARG_CONST_* style argument, as the verifier cannot consider imprecise scalars to be equivalent for the purposes of states_equal …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:00:22.399Z. Updated 2026-06-01T16:03:53.452Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Jun 2026, 23:03 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:00 WIB

CVE-2022-49960

drm/i915: fix null pointer dereference

In the Linux kernel, the following vulnerability has been resolved: drm/i915: fix null pointer dereference Asus chromebook CX550 crashes during boot on v5.17-rc1 kernel. The root cause is null pointer defeference of bi_next in tgl_get_bw_info() in drivers/gpu/drm/i915/display/intel_bw.c. BUG: kernel NULL pointer der…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:00:21.621Z. Updated 2026-05-11T19:10:00.494Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:10 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:00 WIB

CVE-2022-49959

openvswitch: fix memory leak at failed datapath creation

In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix memory leak at failed datapath creation ovs_dp_cmd_new()->ovs_dp_change()->ovs_dp_set_upcall_portids() allocates array via kmalloc. If for some reason new_vport() fails during ovs_dp_cmd_new() dp->upcall_portids must be freed. Add mi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:00:20.749Z. Updated 2026-05-11T19:09:59.282Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:09 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:00 WIB

CVE-2022-49958

net/sched: fix netdevice reference leaks in attach_default_qdiscs()

In the Linux kernel, the following vulnerability has been resolved: net/sched: fix netdevice reference leaks in attach_default_qdiscs() In attach_default_qdiscs(), if a dev has multiple queues and queue 0 fails to attach qdisc because there is no memory in attach_one_default_qdisc(). Then dev->qdisc will be noop_qdis…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:00:20.042Z. Updated 2026-05-11T19:09:58.131Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:09 WIB

Official record

UnscoredPublished 18 Jun 2025, 18:00 WIB

CVE-2022-49957

kcm: fix strp_init() order and cleanup

In the Linux kernel, the following vulnerability has been resolved: kcm: fix strp_init() order and cleanup strp_init() is called just a few lines above this csk->sk_user_data check, it also initializes strp->work etc., therefore, it is unnecessary to call strp_done() to cancel the freshly initialized work. And if sk…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-06-18T11:00:19.238Z. Updated 2026-05-27T09:27:29.975Z.

CVSS—KEVNot listedEPSSPresentUpdated27 May 2026, 16:27 WIB

Official record