Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,673 published records · 15 KEV · 3,673 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,673 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1654.5%
High96026%
Med1,12231%
Low1203.3%
None10.03%
Legacy00.00%
Unscored1,30536%

Matching records by UTC month

Feb 253,673

Signal coverage

KEV-listed: 15
With a forecast: 3,673
Unknown date: 0
Unscored severity: 1,305

Share of cohort: KEV 0.41% · forecast 100% · unscored 36%.

Showing 181–200 of 3,673By severity band: Critical · 9.0–10.0 165, High · 7.0–8.9 960, Medium · 4.0–6.9 1,122, Low · 0.1–3.9 120, None · scored 0.0 1, Legacy · v2 only 0, Unscored · no CNA metric 1,305

HighPublished 27 Feb 2025, 09:18 WIB

CVE-2025-21789

LoongArch: csum: Fix OoB access in IP checksum code for negative lengths

In the Linux kernel, the following vulnerability has been resolved: LoongArch: csum: Fix OoB access in IP checksum code for negative lengths Commit 69e3a6aa6be2 ("LoongArch: Add checksum optimization for 64-bit system") would cause an undefined shift and an out-of-bounds read. Commit 8bd795fedb84 ("arm64: csum: Fix …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:18:27.817Z. Updated 2026-08-05T11:54:27.092Z.

CVSS7.3v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:54 WIB

Official record

HighPublished 27 Feb 2025, 09:18 WIB

CVE-2025-21788

net: ethernet: ti: am65-cpsw: fix memleak in certain XDP cases

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: fix memleak in certain XDP cases If the XDP program doesn't result in XDP_PASS then we leak the memory allocated by am65_cpsw_build_skb(). It is pointless to allocate SKB memory before running the XDP program as we woul…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 181 to 200 of 3673.First page Next page

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:18:27.336Z. Updated 2026-08-05T11:54:25.991Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:54 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:18 WIB

CVE-2025-21787

team: better TEAM_OPTION_TYPE_STRING validation

In the Linux kernel, the following vulnerability has been resolved: team: better TEAM_OPTION_TYPE_STRING validation syzbot reported following splat [1] Make sure user-provided data contains one nul byte. [1] BUG: KMSAN: uninit-value in string_nocheck lib/vsprintf.c:633 [inline] BUG: KMSAN: uninit-value in string+…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:18:26.875Z. Updated 2026-10-15T01:04:23.334Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:04 WIB

Official record

HighPublished 27 Feb 2025, 09:18 WIB

CVE-2025-21786

workqueue: Put the pwq after detaching the rescuer from the pool

In the Linux kernel, the following vulnerability has been resolved: workqueue: Put the pwq after detaching the rescuer from the pool The commit 68f83057b913("workqueue: Reap workers via kthread_stop() and remove detach_completion") adds code to reap the normal workers but mistakenly does not handle the rescuer and al…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:18:26.406Z. Updated 2026-08-05T11:54:24.903Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:54 WIB

Official record

HighPublished 27 Feb 2025, 09:18 WIB

CVE-2025-21785

arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array

In the Linux kernel, the following vulnerability has been resolved: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array The loop that detects/populates cache information already has a bounds check on the array size but does not account for cache levels with separate data/instructions cache. Fix this by inc…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:18:25.938Z. Updated 2026-10-15T21:51:52.980Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 04:51 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:18 WIB

CVE-2025-21784

drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: bail out when failed to load fw in psp_init_cap_microcode() In function psp_init_cap_microcode(), it should bail out when failed to load firmware, otherwise it may cause invalid memory access.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:18:25.431Z. Updated 2026-05-11T21:06:25.934Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:06 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:18 WIB

CVE-2025-21783

gpiolib: Fix crash on error in gpiochip_get_ngpios()

In the Linux kernel, the following vulnerability has been resolved: gpiolib: Fix crash on error in gpiochip_get_ngpios() The gpiochip_get_ngpios() uses chip_*() macros to print messages. However these macros rely on gpiodev to be initialised and set, which is not the case when called via bgpio_init(). In such a case …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:18:24.980Z. Updated 2026-05-11T21:06:20.690Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:06 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:18 WIB

CVE-2025-21782

orangefs: fix a oob in orangefs_debug_write

In the Linux kernel, the following vulnerability has been resolved: orangefs: fix a oob in orangefs_debug_write I got a syzbot report: slab-out-of-bounds Read in orangefs_debug_write... several people suggested fixes, I tested Al Viro's suggestion and made this patch.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:18:24.506Z. Updated 2026-05-11T21:06:19.556Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:06 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:18 WIB

CVE-2025-21781

batman-adv: fix panic during interface removal

In the Linux kernel, the following vulnerability has been resolved: batman-adv: fix panic during interface removal Reference counting is used to ensure that batadv_hardif_neigh_node and batadv_hard_iface are not freed before/during batadv_v_elp_throughput_metric_update work is finished. But there isn't a guarantee t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:18:24.013Z. Updated 2026-05-11T21:06:18.377Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:06 WIB

Official record

HighPublished 27 Feb 2025, 09:18 WIB

CVE-2025-21780

drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() It malicious user provides a small pptable through sysfs and then a bigger pptable, it may cause buffer overflow attack in function smu_sys_set_pp_table().

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:18:23.543Z. Updated 2026-10-15T01:04:22.032Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:04 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:18 WIB

CVE-2025-21779

KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Reject Hyper-V's SEND_IPI hypercalls if local APIC isn't in-kernel Advertise support for Hyper-V's SEND_IPI and SEND_IPI_EX hypercalls if and only if the local API is emulated/virtualized by KVM, and explicitly reject said hypercalls if the…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:18:23.001Z. Updated 2026-10-15T01:04:20.162Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:04 WIB

Official record

HighPublished 27 Feb 2025, 09:18 WIB

CVE-2025-21778

tracing: Do not allow mmap() of persistent ring buffer

In the Linux kernel, the following vulnerability has been resolved: tracing: Do not allow mmap() of persistent ring buffer When trying to mmap a trace instance buffer that is attached to reserve_mem, it would crash: BUG: unable to handle page fault for address: ffffe97bd00025c8 #PF: supervisor read access in kerne…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:18:22.506Z. Updated 2026-08-05T11:54:21.703Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:54 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:18 WIB

CVE-2025-21777

ring-buffer: Validate the persistent meta data subbuf array

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Validate the persistent meta data subbuf array The meta data for a mapped ring buffer contains an array of indexes of all the subbuffers. The first entry is the reader page, and the rest of the entries lay out the order of the subbuffers…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:18:22.008Z. Updated 2026-05-11T21:06:13.633Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:06 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:18 WIB

CVE-2025-21776

USB: hub: Ignore non-compliant devices with too many configs or interfaces

In the Linux kernel, the following vulnerability has been resolved: USB: hub: Ignore non-compliant devices with too many configs or interfaces Robert Morris created a test program which can cause usb_hub_to_struct_hub() to dereference a NULL or inappropriate pointer: Oops: general protection fault, probably for non-…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:18:21.503Z. Updated 2026-10-15T01:04:18.924Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:04 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:18 WIB

CVE-2025-21775

can: ctucanfd: handle skb allocation failure

In the Linux kernel, the following vulnerability has been resolved: can: ctucanfd: handle skb allocation failure If skb allocation fails, the pointer to struct can_frame is NULL. This is actually handled everywhere inside ctucan_err_interrupt() except for the only place. Add the missed NULL check. Found by Linux Ve…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:18:21.019Z. Updated 2026-05-11T21:06:11.286Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:06 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:18 WIB

CVE-2025-21774

can: rockchip: rkcanfd_handle_rx_fifo_overflow_int(): bail out if skb cannot be allocated

In the Linux kernel, the following vulnerability has been resolved: can: rockchip: rkcanfd_handle_rx_fifo_overflow_int(): bail out if skb cannot be allocated Fix NULL pointer check in rkcanfd_handle_rx_fifo_overflow_int() to bail out if skb cannot be allocated.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:18:20.526Z. Updated 2026-05-11T21:06:10.116Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:06 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:18 WIB

CVE-2025-21773

can: etas_es58x: fix potential NULL pointer dereference on udev->serial

In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: fix potential NULL pointer dereference on udev->serial The driver assumed that es58x_dev->udev->serial could never be NULL. While this is true on commercially available devices, an attacker could spoof the device identity providing a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:18:20.013Z. Updated 2026-05-11T21:06:08.977Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:06 WIB

Official record

HighPublished 27 Feb 2025, 09:18 WIB

CVE-2025-21772

partitions: mac: fix handling of bogus partition table

In the Linux kernel, the following vulnerability has been resolved: partitions: mac: fix handling of bogus partition table Fix several issues in partition probing: - The bailout for a bad partoffset must use put_dev_sector(), since the preceding read_part_sector() succeeded. - If the partition table claims a si…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:18:19.528Z. Updated 2026-10-15T21:51:52.838Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 04:51 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:18 WIB

CVE-2025-21771

sched_ext: Fix incorrect autogroup migration detection

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Fix incorrect autogroup migration detection scx_move_task() is called from sched_move_task() and tells the BPF scheduler that cgroup migration is being committed. sched_move_task() is used by both cgroup and autogroup migrations and scx_mo…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:18:19.050Z. Updated 2026-05-11T21:06:06.646Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:06 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:18 WIB

CVE-2025-21770

iommu: Fix potential memory leak in iopf_queue_remove_device()

In the Linux kernel, the following vulnerability has been resolved: iommu: Fix potential memory leak in iopf_queue_remove_device() The iopf_queue_remove_device() helper removes a device from the per-iommu iopf queue when PRI is disabled on the device. It responds to all outstanding iopf's with an IOMMU_PAGE_RESP_INVA…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:18:18.570Z. Updated 2026-05-11T21:06:05.517Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:06 WIB

Official record