Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,980 published records · 19 KEV · 3,980 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,980 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2446.1%
High95724%
Med1,53639%
Low1193.0%
None00.00%
Legacy00.00%
Unscored1,12428%

Matching records by UTC month

May 253,980

Signal coverage

KEV-listed: 19
With a forecast: 3,980
Unknown date: 0
Unscored severity: 1,124

Share of cohort: KEV 0.48% · forecast 100% · unscored 28%.

Showing 1001–1020 of 3,980By severity band: Critical · 9.0–10.0 244, High · 7.0–8.9 957, Medium · 4.0–6.9 1,536, Low · 0.1–3.9 119, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 1,124

HighPublished 20 May 2025, 23:01 WIB

CVE-2025-37952

ksmbd: Fix UAF in __close_file_table_ids

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix UAF in __close_file_table_ids A use-after-free is possible if one thread destroys the file via __ksmbd_close_fd while another thread holds a reference to it. The existing checks on fp->refcount are not sufficient to prevent this. The fix …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T16:01:47.164Z. Updated 2026-08-05T11:58:35.992Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:58 WIB

Official record

UnscoredPublished 20 May 2025, 23:01 WIB

CVE-2025-37951

drm/v3d: Add job to pending list if the reset was skipped

In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Add job to pending list if the reset was skipped When a CL/CSD job times out, we check if the GPU has made any progress since the last timeout. If so, instead of resetting the hardware, we skip the reset and let the timer get rearmed. This g…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 1001 to 1020 of 3980.First page Next page

Published 2025-05-20T16:01:46.555Z. Updated 2026-05-11T21:18:15.521Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:18 WIB

Official record

UnscoredPublished 20 May 2025, 23:01 WIB

CVE-2025-37950

ocfs2: fix panic in failed foilio allocation

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix panic in failed foilio allocation commit 7e119cff9d0a ("ocfs2: convert w_pages to w_folios") and commit 9a5e08652dc4b ("ocfs2: use an array of folios instead of an array of pages") save -ENOMEM in the folio array upon allocation failure an…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T16:01:45.918Z. Updated 2026-05-11T21:18:14.355Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:18 WIB

Official record

HighPublished 20 May 2025, 23:01 WIB

CVE-2025-37949

xenbus: Use kref to track req lifetime

In the Linux kernel, the following vulnerability has been resolved: xenbus: Use kref to track req lifetime Marek reported seeing a NULL pointer fault in the xenbus_thread callstack: BUG: kernel NULL pointer dereference, address: 0000000000000000 RIP: e030:__wake_up_common+0x4c/0x180 Call Trace: <TASK> __wake_up_com…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T16:01:45.242Z. Updated 2026-10-15T21:52:04.919Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 04:52 WIB

Official record

UnscoredPublished 20 May 2025, 23:01 WIB

CVE-2025-37948

arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs

In the Linux kernel, the following vulnerability has been resolved: arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs A malicious BPF program may manipulate the branch history to influence what the hardware speculates will happen next. On exit from a BPF program, emit the BHB mititgation sequence. Th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T16:01:44.452Z. Updated 2026-05-11T21:18:11.984Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:18 WIB

Official record

HighPublished 20 May 2025, 23:01 WIB

CVE-2025-37947

ksmbd: prevent out-of-bounds stream writes by validating *pos

In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent out-of-bounds stream writes by validating *pos ksmbd_vfs_stream_write() did not validate whether the write offset (*pos) was within the bounds of the existing stream data length (v_len). If *pos was greater than or equal to v_len, this…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T16:01:43.788Z. Updated 2026-08-05T11:58:33.808Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:58 WIB

Official record

UnscoredPublished 20 May 2025, 23:01 WIB

CVE-2025-37946

s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs

In the Linux kernel, the following vulnerability has been resolved: s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs With commit bcb5d6c76903 ("s390/pci: introduce lock to synchronize state of zpci_dev's") the code to ignore power off of a PF that has child VFs was changed from a direct r…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T16:01:43.162Z. Updated 2026-05-11T21:18:09.660Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:18 WIB

Official record

UnscoredPublished 20 May 2025, 22:58 WIB

CVE-2025-37945

net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY

In the Linux kernel, the following vulnerability has been resolved: net: phy: allow MDIO bus PM ops to start/stop state machine for phylink-controlled PHY DSA has 2 kinds of drivers: 1. Those who call dsa_switch_suspend() and dsa_switch_resume() from their device PM ops: qca8k-8xxx, bcm_sf2, microchip ksz 2. Thos…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T15:58:20.841Z. Updated 2026-10-15T01:06:14.676Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:06 WIB

Official record

HighPublished 20 May 2025, 22:58 WIB

CVE-2025-37944

wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix invalid entry fetch in ath12k_dp_mon_srng_process Currently, ath12k_dp_mon_srng_process uses ath12k_hal_srng_src_get_next_entry to fetch the next entry from the destination ring. This is incorrect because ath12k_hal_srng_src_get_nex…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T15:58:20.211Z. Updated 2026-10-15T21:52:04.777Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 04:52 WIB

Official record

HighPublished 20 May 2025, 22:58 WIB

CVE-2025-37943

wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix invalid data access in ath12k_dp_rx_h_undecap_nwifi In certain cases, hardware might provide packets with a length greater than the maximum native Wi-Fi header length. This can lead to accessing and modifying fields in the header wi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T15:58:19.607Z. Updated 2026-08-05T11:58:31.647Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:58 WIB

Official record

UnscoredPublished 20 May 2025, 22:58 WIB

CVE-2025-37941

ASoC: codecs: wcd937x: fix a potential memory leak in wcd937x_soc_codec_probe()

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd937x: fix a potential memory leak in wcd937x_soc_codec_probe() When snd_soc_dapm_new_controls() or snd_soc_dapm_add_routes() fails, wcd937x_soc_codec_probe() returns without releasing 'wcd937x->clsh_info', which is allocated by wcd_c…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T15:58:18.275Z. Updated 2026-05-11T21:18:05.091Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:18 WIB

Official record

UnscoredPublished 20 May 2025, 22:58 WIB

CVE-2025-37940

ftrace: Add cond_resched() to ftrace_graph_set_hash()

In the Linux kernel, the following vulnerability has been resolved: ftrace: Add cond_resched() to ftrace_graph_set_hash() When the kernel contains a large number of functions that can be traced, the loop in ftrace_graph_set_hash() may take a lot of time to execute. This may trigger the softlockup watchdog. Add cond_…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T15:58:17.634Z. Updated 2026-05-11T21:18:03.926Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:18 WIB

Official record

UnscoredPublished 20 May 2025, 22:34 WIB

CVE-2025-37939

libbpf: Fix accessing BTF.ext core_relo header

In the Linux kernel, the following vulnerability has been resolved: libbpf: Fix accessing BTF.ext core_relo header Update btf_ext_parse_info() to ensure the core_relo header is present before reading its fields. This avoids a potential buffer read overflow reported by the OSS Fuzz project.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T15:34:41.511Z. Updated 2026-05-11T21:18:02.501Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:18 WIB

Official record

HighPublished 20 May 2025, 22:34 WIB

CVE-2025-37938

tracing: Verify event formats that have "%*p.."

In the Linux kernel, the following vulnerability has been resolved: tracing: Verify event formats that have "%*p.." The trace event verifier checks the formats of trace events to make sure that they do not point at memory that is not in the trace event itself or in data that will never be freed. If an event reference…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T15:34:40.509Z. Updated 2026-10-15T21:52:04.642Z.

CVSS7.1v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 04:52 WIB

Official record

UnscoredPublished 20 May 2025, 22:34 WIB

CVE-2025-37937

objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()

In the Linux kernel, the following vulnerability has been resolved: objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds() If dib8000_set_dds()'s call to dib8000_read32() returns zero, the result is a divide-by-zero. Prevent that from happening. Fixes the following warning with an UBSAN kernel: dri…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T15:34:39.322Z. Updated 2026-05-11T21:17:59.628Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:17 WIB

Official record

MedPublished 20 May 2025, 22:27 WIB

CVE-2024-45641

IBM Security ReaQta improper certificate validation

IBM Security ReaQta EDR 3.12 could allow an attacker to perform unauthorized actions due to improper SSL certificate validation.

Excerpt language: en.

Severity medium: primary CNA CVSS 6.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T15:27:45.402Z. Updated 2025-08-26T15:05:26.154Z.

CVSS6.5v3.1KEVNot listedEPSSPresentUpdated26 Aug 2025, 22:05 WIB

Official record

HighPublished 20 May 2025, 22:22 WIB

CVE-2025-37936

perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value. When generating the MSR_IA32_PEBS_ENABLE value that will be loaded on VM-Entry to a KVM guest, mask the value with the vCPU's desired PEBS_ENABLE value. Consulting only the ho…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T15:22:00.557Z. Updated 2026-10-15T21:52:04.467Z.

CVSS8.7v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 04:52 WIB

Official record

CritPublished 20 May 2025, 22:21 WIB

CVE-2025-37935

net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM If the mtk_poll_rx() function detects the MTK_RESETTING flag, it will jump to release_desc and refill the high word of the SDP on the 4GB RFB. Subsequently, mtk_rx_clean will process an incorrec…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T15:21:59.381Z. Updated 2026-08-05T11:58:28.431Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:58 WIB

Official record

UnscoredPublished 20 May 2025, 22:21 WIB

CVE-2025-37934

ASoC: simple-card-utils: Fix pointer check in graph_util_parse_link_direction

In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Fix pointer check in graph_util_parse_link_direction Actually check if the passed pointers are valid, before writing to them. This also fixes a USBAN warning: UBSAN: invalid-load in ../sound/soc/fsl/imx-card.c:687:25 load of …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T15:21:58.770Z. Updated 2026-05-11T21:17:56.252Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:17 WIB

Official record

UnscoredPublished 20 May 2025, 22:21 WIB

CVE-2025-37933

octeon_ep: Fix host hang issue during device reboot

In the Linux kernel, the following vulnerability has been resolved: octeon_ep: Fix host hang issue during device reboot When the host loses heartbeat messages from the device, the driver calls the device-specific ndo_stop function, which frees the resources. If the driver is unloaded in this scenario, it calls ndo_st…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-05-20T15:21:58.169Z. Updated 2026-05-11T21:17:55.133Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:17 WIB

Official record