Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 5,493 published records · 23 KEV · 5,493 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

5,493 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit3175.8%
High1,53028%
Med2,03937%
Low1262.3%
None10.02%
Legacy00.00%
Unscored1,48027%

Matching records by UTC month

Dec 255,493

Signal coverage

KEV-listed: 23
With a forecast: 5,493
Unknown date: 0
Unscored severity: 1,480

Share of cohort: KEV 0.42% · forecast 100% · unscored 27%.

Showing 1361–1380 of 5,493By severity band: Critical · 9.0–10.0 317, High · 7.0–8.9 1,530, Medium · 4.0–6.9 2,039, Low · 0.1–3.9 126, None · scored 0.0 1, Legacy · v2 only 0, Unscored · no CNA metric 1,480

CritPublished 24 Dec 2025, 17:33 WIB

CVE-2025-68726

crypto: aead - Fix reqsize handling

In the Linux kernel, the following vulnerability has been resolved: crypto: aead - Fix reqsize handling Commit afddce13ce81d ("crypto: api - Add reqsize to crypto_alg") introduced cra_reqsize field in crypto_alg struct to replace type specific reqsize fields. It looks like this was introduced specifically for ahash a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:33:10.364Z. Updated 2026-08-05T12:11:09.299Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 19:11 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:33 WIB

CVE-2025-68725

bpf: Do not let BPF test infra emit invalid GSO types to stack

In the Linux kernel, the following vulnerability has been resolved: bpf: Do not let BPF test infra emit invalid GSO types to stack Yinhao et al. reported that their fuzzer tool was able to trigger a skb_warn_bad_offload() from netif_skb_features() -> gso_features_check(). When a BPF program - triggered via BPF test i…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 1361 to 1380 of 5493.First page Next page

Published 2025-12-24T10:33:09.610Z. Updated 2026-10-15T01:10:01.204Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:10 WIB

Official record

HighPublished 24 Dec 2025, 17:33 WIB

CVE-2025-68724

crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id

In the Linux kernel, the following vulnerability has been resolved: crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id Use check_add_overflow() to guard against potential integer overflows when adding the binary blob lengths and the size of an asymmetric_key_id structure and return ERR_PTR(-EOVE…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:33:08.932Z. Updated 2026-10-15T01:09:59.479Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:09 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:33 WIB

CVE-2025-68380

wifi: ath11k: fix peer HE MCS assignment

In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix peer HE MCS assignment In ath11k_wmi_send_peer_assoc_cmd(), peer's transmit MCS is sent to firmware as receive MCS while peer's receive MCS sent as transmit MCS, which goes against firmwire's definition. While connecting to a misbe…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:33:08.266Z. Updated 2026-05-11T21:52:05.766Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:52 WIB

Official record

HighPublished 24 Dec 2025, 17:33 WIB

CVE-2025-68379

RDMA/rxe: Fix null deref on srq->rq.queue after resize failure

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix null deref on srq->rq.queue after resize failure A NULL pointer dereference can occur in rxe_srq_chk_attr() when ibv_modify_srq() is invoked twice in succession under certain error conditions. The first call may fail in rxe_queue_resize…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:33:07.538Z. Updated 2026-10-16T15:09:43.601Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 22:09 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:33 WIB

CVE-2025-68378

bpf: Fix stackmap overflow check in __bpf_get_stackid()

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stackmap overflow check in __bpf_get_stackid() Syzkaller reported a KASAN slab-out-of-bounds write in __bpf_get_stackid() when copying stack trace data. The issue occurs when the perf trace contains more stack entries than the stack map buc…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:33:06.859Z. Updated 2026-10-21T12:38:22.607Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Oct 2026, 19:38 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:33 WIB

CVE-2025-68377

ns: initialize ns_list_node for initial namespaces

In the Linux kernel, the following vulnerability has been resolved: ns: initialize ns_list_node for initial namespaces Make sure that the list is always initialized for initial namespaces.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:33:06.174Z. Updated 2026-05-11T21:52:01.948Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:52 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:33 WIB

CVE-2025-68376

coresight: ETR: Fix ETR buffer use-after-free issue

In the Linux kernel, the following vulnerability has been resolved: coresight: ETR: Fix ETR buffer use-after-free issue When ETR is enabled as CS_MODE_SYSFS, if the buffer size is changed and enabled again, currently sysfs_buf will point to the newly allocated memory(buf_new) and free the old memory(buf_old). But the…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:33:05.503Z. Updated 2026-10-21T12:38:21.502Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Oct 2026, 19:38 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:33 WIB

CVE-2025-68375

perf/x86: Fix NULL event access and potential PEBS record loss

In the Linux kernel, the following vulnerability has been resolved: perf/x86: Fix NULL event access and potential PEBS record loss When intel_pmu_drain_pebs_icl() is called to drain PEBS records, the perf_event_overflow() could be called to process the last PEBS record. While perf_event_overflow() could trigger the …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:33:04.819Z. Updated 2026-05-11T21:51:59.533Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:51 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:33 WIB

CVE-2025-68374

md: fix rcu protection in md_wakeup_thread

In the Linux kernel, the following vulnerability has been resolved: md: fix rcu protection in md_wakeup_thread We attempted to use RCU to protect the pointer 'thread', but directly passed the value when calling md_wakeup_thread(). This means that the RCU pointer has been acquired before rcu_read_lock(), which renders…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:33:04.046Z. Updated 2026-10-21T12:38:20.382Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Oct 2026, 19:38 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:33 WIB

CVE-2025-68373

md: avoid repeated calls to del_gendisk

In the Linux kernel, the following vulnerability has been resolved: md: avoid repeated calls to del_gendisk There is a uaf problem which is found by case 23rdev-lifetime: Oops: general protection fault, probably for non-canonical address 0xdead000000000122 RIP: 0010:bdi_unregister+0x4b/0x170 Call Trace: <TASK> __d…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:33:03.375Z. Updated 2026-05-11T21:51:57.240Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:51 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:33 WIB

CVE-2025-68372

nbd: defer config put in recv_work

In the Linux kernel, the following vulnerability has been resolved: nbd: defer config put in recv_work There is one uaf issue in recv_work when running NBD_CLEAR_SOCK and NBD_CMD_RECONFIGURE: nbd_genl_connect // conf_ref=2 (connect and recv_work A) nbd_open // conf_ref=3 recv_work A done // conf_…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:33:02.679Z. Updated 2026-06-16T19:28:42.649Z.

CVSS—KEVNot listedEPSSPresentUpdated17 Jun 2026, 02:28 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:33 WIB

CVE-2025-68371

scsi: smartpqi: Fix device resources accessed after device removal

In the Linux kernel, the following vulnerability has been resolved: scsi: smartpqi: Fix device resources accessed after device removal Correct possible race conditions during device removal. Previously, a scheduled work item to reset a LUN could still execute after the device was removed, leading to use-after-free a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:33:01.896Z. Updated 2026-10-15T01:09:57.741Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:09 WIB

Official record

HighPublished 24 Dec 2025, 17:32 WIB

CVE-2025-68370

coresight: tmc: add the handle of the event to the path

In the Linux kernel, the following vulnerability has been resolved: coresight: tmc: add the handle of the event to the path The handle is essential for retrieving the AUX_EVENT of each CPU and is required in perf mode. It has been added to the coresight_path so that dependent devices can access it from the path when …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:32:56.149Z. Updated 2026-08-05T12:11:06.086Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 19:11 WIB

Official record

HighPublished 24 Dec 2025, 17:32 WIB

CVE-2025-68369

ntfs3: init run lock for extend inode

In the Linux kernel, the following vulnerability has been resolved: ntfs3: init run lock for extend inode After setting the inode mode of $Extend to a regular file, executing the truncate system call will enter the do_truncate() routine, causing the run_lock uninitialized error reported by syzbot. Prior to patch 4e8…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:32:55.440Z. Updated 2026-08-05T12:11:05.018Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 19:11 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:32 WIB

CVE-2025-68368

md: init bioset in mddev_init

In the Linux kernel, the following vulnerability has been resolved: md: init bioset in mddev_init IO operations may be needed before md_run(), such as updating metadata after writing sysfs. Without bioset, this triggers a NULL pointer dereference as below: BUG: kernel NULL pointer dereference, address: 000000000000…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:32:54.765Z. Updated 2026-10-21T12:38:19.281Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Oct 2026, 19:38 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:32 WIB

CVE-2025-68367

macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse

In the Linux kernel, the following vulnerability has been resolved: macintosh/mac_hid: fix race condition in mac_hid_toggle_emumouse The following warning appears when running syzkaller, and this issue also exists in the mainline code. ------------[ cut here ]------------ list_add double add: new=ffffffffa57eee28,…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:32:54.084Z. Updated 2026-05-11T21:51:50.117Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:51 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:32 WIB

CVE-2025-68366

nbd: defer config unlock in nbd_genl_connect

In the Linux kernel, the following vulnerability has been resolved: nbd: defer config unlock in nbd_genl_connect There is one use-after-free warning when running NBD_CMD_CONNECT and NBD_CLEAR_SOCK: nbd_genl_connect nbd_alloc_and_init_config // config_refs=1 nbd_start_device // config_refs=2 set NBD_RT_HAS_CONF…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:32:53.399Z. Updated 2026-06-16T19:12:35.384Z.

CVSS—KEVNot listedEPSSPresentUpdated17 Jun 2026, 02:12 WIB

Official record

HighPublished 24 Dec 2025, 17:32 WIB

CVE-2025-68365

fs/ntfs3: Initialize allocated memory before use

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Initialize allocated memory before use KMSAN reports: Multiple uninitialized values detected: - KMSAN: uninit-value in ntfs_read_hdr (3) - KMSAN: uninit-value in bcmp (3) Memory is allocated by __getname(), which is a wrapper for kmem_cac…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:32:52.728Z. Updated 2026-08-05T12:11:03.953Z.

CVSS8.2v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 19:11 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:32 WIB

CVE-2025-68364

ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent()

In the Linux kernel, the following vulnerability has been resolved: ocfs2: relax BUG() to ocfs2_error() in __ocfs2_move_extent() In '__ocfs2_move_extent()', relax 'BUG()' to 'ocfs2_error()' just to avoid crashing the whole kernel due to a filesystem corruption.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:32:51.922Z. Updated 2026-05-11T21:51:46.671Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:51 WIB

Official record