Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 4,319 published records · 16 KEV · 4,319 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

4,319 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2265.2%
High95922%
Med1,81142%
Low1283.0%
None00.00%
Legacy00.00%
Unscored1,19528%

Matching records by UTC month

Sep 254,319

Signal coverage

KEV-listed: 16
With a forecast: 4,319
Unknown date: 0
Unscored severity: 1,195

Share of cohort: KEV 0.37% · forecast 100% · unscored 28%.

Showing 1481–1500 of 4,319By severity band: Critical · 9.0–10.0 226, High · 7.0–8.9 959, Medium · 4.0–6.9 1,811, Low · 0.1–3.9 128, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 1,195

HighPublished 18 Sep 2025, 23:04 WIB

CVE-2023-53426

xsk: Fix xsk_diag use-after-free error during socket cleanup

In the Linux kernel, the following vulnerability has been resolved: xsk: Fix xsk_diag use-after-free error during socket cleanup Fix a use-after-free error that is possible if the xsk_diag interface is used after the socket has been unbound from the device. This can happen either due to the socket being closed or the…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T16:04:08.192Z. Updated 2026-08-05T09:14:03.906Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 16:14 WIB

Official record

UnscoredPublished 18 Sep 2025, 23:04 WIB

CVE-2023-53425

media: platform: mediatek: vpu: fix NULL ptr dereference

In the Linux kernel, the following vulnerability has been resolved: media: platform: mediatek: vpu: fix NULL ptr dereference If pdev is NULL, then it is still dereferenced. This fixes this smatch warning: drivers/media/platform/mediatek/vpu/mtk_vpu.c:570 vpu_load_firmware() warn: address of NULL pointer 'pdev'

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 1481 to 1500 of 4319.First page Next page

Published 2025-09-18T16:04:07.335Z. Updated 2026-05-11T19:44:43.847Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:44 WIB

Official record

UnscoredPublished 18 Sep 2025, 23:04 WIB

CVE-2023-53424

clk: mediatek: fix of_iomap memory leak

In the Linux kernel, the following vulnerability has been resolved: clk: mediatek: fix of_iomap memory leak Smatch reports: drivers/clk/mediatek/clk-mtk.c:583 mtk_clk_simple_probe() warn: 'base' from of_iomap() not released on lines: 496. This problem was also found in linux-next. In mtk_clk_simple_probe(), base…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T16:04:06.635Z. Updated 2026-05-11T19:44:42.697Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:44 WIB

Official record

UnscoredPublished 18 Sep 2025, 23:04 WIB

CVE-2023-53423

objtool: Fix memory leak in create_static_call_sections()

In the Linux kernel, the following vulnerability has been resolved: objtool: Fix memory leak in create_static_call_sections() strdup() allocates memory for key_name. We need to release the memory in the following error paths. Add free() to avoid memory leak.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T16:04:05.957Z. Updated 2026-05-11T19:44:41.459Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:44 WIB

Official record

UnscoredPublished 18 Sep 2025, 23:04 WIB

CVE-2023-53422

wifi: iwlwifi: fw: fix memory leak in debugfs

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: fw: fix memory leak in debugfs Fix a memory leak that occurs when reading the fw_info file all the way, since we return NULL indicating no more data, but don't free the status tracking object.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T16:04:05.224Z. Updated 2026-05-11T19:44:40.252Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:44 WIB

Official record

UnscoredPublished 18 Sep 2025, 23:04 WIB

CVE-2023-53421

blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats()

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats() When blkg_alloc() is called to allocate a blkcg_gq structure with the associated blkg_iostat_set's, there are 2 fields within blkg_iostat_set that requires proper initialization…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T16:04:04.526Z. Updated 2026-06-01T16:04:11.445Z.

CVSS—KEVNot listedEPSSPresentUpdated01 Jun 2026, 23:04 WIB

Official record

HighPublished 18 Sep 2025, 23:04 WIB

CVE-2023-53420

ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr()

In the Linux kernel, the following vulnerability has been resolved: ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr() Here is a BUG report from syzbot: BUG: KASAN: slab-out-of-bounds in ntfs_list_ea fs/ntfs3/xattr.c:191 [inline] BUG: KASAN: slab-out-of-bounds in ntfs_listxattr+0x401/0x570 fs/ntfs3/…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T16:04:03.754Z. Updated 2026-08-05T09:14:02.648Z.

CVSS7.1v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 16:14 WIB

Official record

UnscoredPublished 18 Sep 2025, 23:04 WIB

CVE-2023-53419

rcu: Protect rcu_print_task_exp_stall() ->exp_tasks access

In the Linux kernel, the following vulnerability has been resolved: rcu: Protect rcu_print_task_exp_stall() ->exp_tasks access For kernels built with CONFIG_PREEMPT_RCU=y, the following scenario can result in a NULL-pointer dereference: CPU1 CPU2 rcu_preempt_defer…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T16:04:02.955Z. Updated 2026-05-11T19:44:36.756Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:44 WIB

Official record

HighPublished 18 Sep 2025, 23:04 WIB

CVE-2022-50419

Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times device_add shall not be called multiple times as stated in its documentation: 'Do not call this routine or device_register() more than once for any device structure' Syzkaller…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T16:04:02.152Z. Updated 2026-08-05T08:58:43.597Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 15:58 WIB

Official record

UnscoredPublished 18 Sep 2025, 23:04 WIB

CVE-2022-50418

wifi: ath11k: mhi: fix potential memory leak in ath11k_mhi_register()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: mhi: fix potential memory leak in ath11k_mhi_register() mhi_alloc_controller() allocates a memory space for mhi_ctrl. When gets some error, mhi_ctrl should be freed with mhi_free_controller(). But when ath11k_mhi_read_addr_from_dt() fai…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T16:04:01.436Z. Updated 2026-08-15T12:23:28.676Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Aug 2026, 19:23 WIB

Official record

HighPublished 18 Sep 2025, 23:04 WIB

CVE-2022-50417

drm/panfrost: Fix GEM handle creation ref-counting

In the Linux kernel, the following vulnerability has been resolved: drm/panfrost: Fix GEM handle creation ref-counting panfrost_gem_create_with_handle() previously returned a BO but with the only reference being from the handle, which user space could in theory guess and release, causing a use-after-free. Additionall…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T16:04:00.512Z. Updated 2026-08-05T08:58:42.522Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 15:58 WIB

Official record

UnscoredPublished 18 Sep 2025, 23:03 WIB

CVE-2022-50416

irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init()

In the Linux kernel, the following vulnerability has been resolved: irqchip/wpcm450: Fix memory leak in wpcm450_aic_of_init() If of_iomap() failed, 'aic' should be freed before return. Otherwise there is a memory leak.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T16:03:59.541Z. Updated 2026-05-11T19:19:04.379Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:19 WIB

Official record

UnscoredPublished 18 Sep 2025, 23:03 WIB

CVE-2022-50415

parisc: led: Fix potential null-ptr-deref in start_task()

In the Linux kernel, the following vulnerability has been resolved: parisc: led: Fix potential null-ptr-deref in start_task() start_task() calls create_singlethread_workqueue() and not checked the ret value, which may return NULL. And a null-ptr-deref may happen: start_task() create_singlethread_workqueue() # fa…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T16:03:58.836Z. Updated 2026-05-11T19:19:03.061Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:19 WIB

Official record

UnscoredPublished 18 Sep 2025, 23:03 WIB

CVE-2022-50414

scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails

In the Linux kernel, the following vulnerability has been resolved: scsi: fcoe: Fix transport not deattached when fcoe_if_init() fails fcoe_init() calls fcoe_transport_attach(&fcoe_sw_transport), but when fcoe_if_init() fails, &fcoe_sw_transport is not detached and leaves freed &fcoe_sw_transport on fcoe_transports l…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T16:03:58.156Z. Updated 2026-05-11T19:19:01.870Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:19 WIB

Official record

HighPublished 18 Sep 2025, 23:03 WIB

CVE-2022-50413

wifi: mac80211: fix use-after-free

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix use-after-free We've already freed the assoc_data at this point, so need to use another copy of the AP (MLD) address instead.

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T16:03:56.853Z. Updated 2026-08-05T08:58:41.448Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 15:58 WIB

Official record

UnscoredPublished 18 Sep 2025, 23:03 WIB

CVE-2022-50412

drm: bridge: adv7511: unregister cec i2c device after cec adapter

In the Linux kernel, the following vulnerability has been resolved: drm: bridge: adv7511: unregister cec i2c device after cec adapter cec_unregister_adapter() assumes that the underlying adapter ops are callable. For example, if the CEC adapter currently has a valid physical address, then the unregistration procedure…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T16:03:56.159Z. Updated 2026-05-11T19:18:59.583Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:18 WIB

Official record

HighPublished 18 Sep 2025, 23:03 WIB

CVE-2022-50411

ACPICA: Fix error code path in acpi_ds_call_control_method()

In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix error code path in acpi_ds_call_control_method() A use-after-free in acpi_ps_parse_aml() after a failing invocaion of acpi_ds_call_control_method() is reported by KASAN [1] and code inspection reveals that next_walk_state pushed to the th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T16:03:55.437Z. Updated 2026-08-05T08:58:40.374Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 15:58 WIB

Official record

CritPublished 18 Sep 2025, 23:03 WIB

CVE-2022-50410

NFSD: Protect against send buffer overflow in NFSv2 READ

In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READ Since before the git era, NFSD has conserved the number of pages held by each nfsd thread by combining the RPC receive and send buffers into a single array of pages. This works because there ar…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T16:03:54.612Z. Updated 2026-08-05T08:58:39.274Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 15:58 WIB

Official record

UnscoredPublished 18 Sep 2025, 23:03 WIB

CVE-2022-50409

net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory

In the Linux kernel, the following vulnerability has been resolved: net: If sock is dead don't access sock's sk_wq in sk_stream_wait_memory Fixes the below NULL pointer dereference: [...] [ 14.471200] Call Trace: [ 14.471562] <TASK> [ 14.471882] lock_acquire+0x245/0x2e0 [ 14.472416] ? remove_wai…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T16:03:53.902Z. Updated 2026-05-11T19:18:56.170Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:18 WIB

Official record

HighPublished 18 Sep 2025, 23:03 WIB

CVE-2022-50408

wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit()

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() > ret = brcmf_proto_tx_queue_data(drvr, ifp->ifidx, skb); may be schedule, and then complete before the line > ndev->stats.tx_bytes += skb->len; [ 46.912801] ===================…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-18T16:03:53.197Z. Updated 2026-08-05T08:58:38.195Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 15:58 WIB

Official record