Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 5,493 published records · 23 KEV · 5,493 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

5,493 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit3175.8%
High1,53028%
Med2,03937%
Low1262.3%
None10.02%
Legacy00.00%
Unscored1,48027%

Matching records by UTC month

Dec 255,493

Signal coverage

KEV-listed: 23
With a forecast: 5,493
Unknown date: 0
Unscored severity: 1,480

Share of cohort: KEV 0.42% · forecast 100% · unscored 27%.

Showing 1061–1080 of 5,493By severity band: Critical · 9.0–10.0 317, High · 7.0–8.9 1,530, Medium · 4.0–6.9 2,039, Low · 0.1–3.9 126, None · scored 0.0 1, Legacy · v2 only 0, Unscored · no CNA metric 1,480

UnscoredPublished 24 Dec 2025, 20:06 WIB

CVE-2023-54147

media: platform: mtk-mdp3: Add missing check and free for ida_alloc

In the Linux kernel, the following vulnerability has been resolved: media: platform: mtk-mdp3: Add missing check and free for ida_alloc Add the check for the return value of the ida_alloc in order to avoid NULL pointer dereference. Moreover, free allocated "ctx->id" if mdp_m2m_open fails later in order to avoid memor…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T13:06:59.566Z. Updated 2026-05-11T19:56:23.810Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:56 WIB

Official record

UnscoredPublished 24 Dec 2025, 20:06 WIB

CVE-2023-54146

x86/kexec: Fix double-free of elf header buffer

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fix double-free of elf header buffer After b3e34a47f989 ("x86/kexec: fix memory leak of elf header buffer"), freeing image->elf_headers in the error path of crash_load_segments() is not needed because kimage_file_post_load_cleanup() wi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 1061 to 1080 of 5493.First page Next page

Published 2025-12-24T13:06:58.904Z. Updated 2026-05-23T15:33:14.821Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:33 WIB

Official record

UnscoredPublished 24 Dec 2025, 20:06 WIB

CVE-2023-54145

bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log

In the Linux kernel, the following vulnerability has been resolved: bpf: drop unnecessary user-triggerable WARN_ONCE in verifierl log It's trivial for user to trigger "verifier log line truncated" warning, as verifier has a fixed-sized buffer of 1024 bytes (as of now), and there are at least two pieces of user-provid…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T13:06:58.227Z. Updated 2026-05-11T19:56:21.424Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:56 WIB

Official record

UnscoredPublished 24 Dec 2025, 20:06 WIB

CVE-2023-54144

drm/amdkfd: Fix kernel warning during topology setup

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix kernel warning during topology setup This patch fixes the following kernel warning seen during driver load by correctly initializing the p2plink attr before creating the sysfs file: [ +0.002865] ------------[ cut here ]------------ …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T13:06:57.546Z. Updated 2026-05-11T19:56:20.267Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:56 WIB

Official record

UnscoredPublished 24 Dec 2025, 20:06 WIB

CVE-2023-54143

media: mediatek: vcodec: fix resource leaks in vdec_msg_queue_init()

In the Linux kernel, the following vulnerability has been resolved: media: mediatek: vcodec: fix resource leaks in vdec_msg_queue_init() If we encounter any error in the vdec_msg_queue_init() then we need to set "msg_queue->wdma_addr.size = 0;". Normally, this is done inside the vdec_msg_queue_deinit() function. Ho…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T13:06:56.869Z. Updated 2026-05-11T19:56:19.068Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:56 WIB

Official record

HighPublished 24 Dec 2025, 20:06 WIB

CVE-2023-54142

gtp: Fix use-after-free in __gtp_encap_destroy().

In the Linux kernel, the following vulnerability has been resolved: gtp: Fix use-after-free in __gtp_encap_destroy(). syzkaller reported use-after-free in __gtp_encap_destroy(). [0] It shows the same process freed sk and touched it illegally. Commit e198987e7dd7 ("gtp: fix suspicious RCU usage") added lock_sock() a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T13:06:56.204Z. Updated 2026-08-05T09:17:36.638Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 16:17 WIB

Official record

UnscoredPublished 24 Dec 2025, 20:06 WIB

CVE-2023-54141

wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Add missing hw_ops->get_ring_selector() for IPQ5018 During sending data after clients connected, hw_ops->get_ring_selector() will be called. But for IPQ5018, this member isn't set, and the following NULL pointer exception will be occurr…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T13:06:55.468Z. Updated 2026-09-02T12:49:08.767Z.

CVSS—KEVNot listedEPSSPresentUpdated02 Sep 2026, 19:49 WIB

Official record

HighPublished 24 Dec 2025, 20:06 WIB

CVE-2023-54140

nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse A syzbot stress test using a corrupted disk image reported that mark_buffer_dirty() called from __nilfs_mark_inode_dirty() or nilfs_palloc_commit_alloc_entry() may output a kernel…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T13:06:54.784Z. Updated 2026-08-05T09:17:35.344Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 16:17 WIB

Official record

HighPublished 24 Dec 2025, 20:06 WIB

CVE-2023-54139

tracing/user_events: Ensure write index cannot be negative

In the Linux kernel, the following vulnerability has been resolved: tracing/user_events: Ensure write index cannot be negative The write index indicates which event the data is for and accesses a per-file array. The index is passed by user processes during write() calls as the first 4 bytes. Ensure that it cannot be …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T13:06:54.094Z. Updated 2026-08-05T09:17:34.267Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 16:17 WIB

Official record

UnscoredPublished 24 Dec 2025, 20:06 WIB

CVE-2023-54138

drm/msm: fix NULL-deref on irq uninstall

In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix NULL-deref on irq uninstall In case of early initialisation errors and on platforms that do not use the DPU controller, the deinitilisation code can be called with the kms pointer set to NULL. Patchwork: https://patchwork.freedesktop.or…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T13:06:53.365Z. Updated 2026-05-11T19:56:13.226Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:56 WIB

Official record

UnscoredPublished 24 Dec 2025, 20:06 WIB

CVE-2023-54137

vfio/type1: fix cap_migration information leak

In the Linux kernel, the following vulnerability has been resolved: vfio/type1: fix cap_migration information leak Fix an information leak where an uninitialized hole in struct vfio_iommu_type1_info_cap_migration on the stack is exposed to userspace. The definition of struct vfio_iommu_type1_info_cap_migration conta…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T13:06:52.689Z. Updated 2026-05-11T19:56:12.086Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:56 WIB

Official record

UnscoredPublished 24 Dec 2025, 20:06 WIB

CVE-2023-54136

serial: sprd: Fix DMA buffer leak issue

In the Linux kernel, the following vulnerability has been resolved: serial: sprd: Fix DMA buffer leak issue Release DMA buffer when _probe() returns failure to avoid memory leak.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T13:06:51.989Z. Updated 2026-05-11T19:56:10.923Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:56 WIB

Official record

HighPublished 24 Dec 2025, 20:06 WIB

CVE-2023-54135

maple_tree: fix potential out-of-bounds access in mas_wr_end_piv()

In the Linux kernel, the following vulnerability has been resolved: maple_tree: fix potential out-of-bounds access in mas_wr_end_piv() Check the write offset end bounds before using it as the offset into the pivot array. This avoids a possible out-of-bounds access on the pivot array if the write extends to the last …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T13:06:51.329Z. Updated 2026-08-05T09:17:33.212Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 16:17 WIB

Official record

UnscoredPublished 24 Dec 2025, 20:06 WIB

CVE-2023-54134

autofs: fix memory leak of waitqueues in autofs_catatonic_mode

In the Linux kernel, the following vulnerability has been resolved: autofs: fix memory leak of waitqueues in autofs_catatonic_mode Syzkaller reports a memory leak: BUG: memory leak unreferenced object 0xffff88810b279e00 (size 96): comm "syz-executor399", pid 3631, jiffies 4294964921 (age 23.870s) hex dump (first…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T13:06:50.627Z. Updated 2026-05-11T19:56:08.647Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:56 WIB

Official record

UnscoredPublished 24 Dec 2025, 20:06 WIB

CVE-2023-54133

nfp: clean mc addresses in application firmware when closing port

In the Linux kernel, the following vulnerability has been resolved: nfp: clean mc addresses in application firmware when closing port When moving devices from one namespace to another, mc addresses are cleaned in software while not removed from application firmware. Thus the mc addresses are remained and will cause r…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T13:06:49.919Z. Updated 2026-05-11T19:56:07.492Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:56 WIB

Official record

HighPublished 24 Dec 2025, 20:06 WIB

CVE-2023-54132

erofs: stop parsing non-compact HEAD index if clusterofs is invalid

In the Linux kernel, the following vulnerability has been resolved: erofs: stop parsing non-compact HEAD index if clusterofs is invalid Syzbot generated a crafted image [1] with a non-compact HEAD index of clusterofs 33024 while valid numbers should be 0 ~ lclustersize-1, which causes the following unexpected behavio…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T13:06:49.030Z. Updated 2026-08-05T09:17:32.148Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 16:17 WIB

Official record

UnscoredPublished 24 Dec 2025, 20:06 WIB

CVE-2023-54131

wifi: rt2x00: Fix memory leak when handling surveys

In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: Fix memory leak when handling surveys When removing a rt2x00 device, its associated channel surveys are not freed, causing a memory leak observable with kmemleak: unreferenced object 0xffff9620f0881a00 (size 512): comm "systemd-udevd…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T13:06:48.227Z. Updated 2026-05-11T19:56:05.152Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:56 WIB

Official record

HighPublished 24 Dec 2025, 20:06 WIB

CVE-2023-54130

hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling

In the Linux kernel, the following vulnerability has been resolved: hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling Commit 55d1cbbbb29e ("hfs/hfsplus: use WARN_ON for sanity check") fixed a build warning by turning a comment into a WARN_ON(), but it turns out that syzbot then complains becaus…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T13:06:47.502Z. Updated 2026-08-05T09:17:31.074Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 16:17 WIB

Official record

HighPublished 24 Dec 2025, 20:06 WIB

CVE-2023-54129

octeontx2-af: Add validation for lmac type

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: Add validation for lmac type Upon physical link change, firmware reports to the kernel about the change along with the details like speed, lmac_type_id, etc. Kernel derives lmac_type based on lmac_type_id received from firmware. In a f…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T13:06:46.817Z. Updated 2026-08-05T09:17:30.008Z.

CVSS7.1v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 16:17 WIB

Official record

HighPublished 24 Dec 2025, 20:06 WIB

CVE-2023-54128

fs: drop peer group ids under namespace lock

In the Linux kernel, the following vulnerability has been resolved: fs: drop peer group ids under namespace lock When cleaning up peer group ids in the failure path we need to make sure to hold on to the namespace lock. Otherwise another thread might just turn the mount from a shared into a non-shared mount concurren…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T13:06:46.056Z. Updated 2026-10-15T21:41:40.328Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 04:41 WIB

Official record