Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 5,493 published records · 23 KEV · 5,493 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

5,493 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit3175.8%
High1,53028%
Med2,03937%
Low1262.3%
None10.02%
Legacy00.00%
Unscored1,48027%

Matching records by UTC month

Dec 255,493

Signal coverage

KEV-listed: 23
With a forecast: 5,493
Unknown date: 0
Unscored severity: 1,480

Share of cohort: KEV 0.42% · forecast 100% · unscored 27%.

Showing 1381–1400 of 5,493By severity band: Critical · 9.0–10.0 317, High · 7.0–8.9 1,530, Medium · 4.0–6.9 2,039, Low · 0.1–3.9 126, None · scored 0.0 1, Legacy · v2 only 0, Unscored · no CNA metric 1,480

UnscoredPublished 24 Dec 2025, 17:32 WIB

CVE-2025-68363

bpf: Check skb->transport_header is set in bpf_skb_check_mtu

In the Linux kernel, the following vulnerability has been resolved: bpf: Check skb->transport_header is set in bpf_skb_check_mtu The bpf_skb_check_mtu helper needs to use skb->transport_header when the BPF_MTU_CHK_SEGS flag is used: bpf_skb_check_mtu(skb, ifindex, &mtu_len, 0, BPF_MTU_CHK_SEGS) The transport_heade…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:32:51.236Z. Updated 2026-10-15T01:09:55.986Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:09 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:32 WIB

CVE-2025-68362

wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb()

In the Linux kernel, the following vulnerability has been resolved: wifi: rtl818x: rtl8187: Fix potential buffer underflow in rtl8187_rx_cb() The rtl8187_rx_cb() calculates the rx descriptor header address by subtracting its size from the skb tail pointer. However, it does not validate if the received packet (skb->le…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 1381 to 1400 of 5493.First page Next page

Published 2025-12-24T10:32:50.492Z. Updated 2026-05-11T21:51:44.272Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:51 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:32 WIB

CVE-2025-68361

erofs: limit the level of fs stacking for file-backed mounts

In the Linux kernel, the following vulnerability has been resolved: erofs: limit the level of fs stacking for file-backed mounts Otherwise, it could cause potential kernel stack overflow (e.g., EROFS mounting itself).

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:32:49.792Z. Updated 2026-05-11T21:51:43.040Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:51 WIB

Official record

HighPublished 24 Dec 2025, 17:32 WIB

CVE-2025-68360

wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks MT7996 driver can use both wed and wed_hif2 devices to offload traffic from/to the wireless NIC. In the current codebase we assume to always use the primary wed device in wed cal…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.2 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:32:49.121Z. Updated 2026-10-21T12:38:18.199Z.

CVSS8.2v3.1KEVNot listedEPSSPresentUpdated21 Oct 2026, 19:38 WIB

Official record

CritPublished 24 Dec 2025, 17:32 WIB

CVE-2025-68359

btrfs: fix double free of qgroup record after failure to add delayed ref head

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix double free of qgroup record after failure to add delayed ref head In the previous code it was possible to incur into a double kfree() scenario when calling add_delayed_ref_head(). This could happen if the record was reported to already ex…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:32:48.456Z. Updated 2026-10-21T12:38:17.109Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated21 Oct 2026, 19:38 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:32 WIB

CVE-2025-68358

btrfs: fix racy bitfield write in btrfs_clear_space_info_full()

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix racy bitfield write in btrfs_clear_space_info_full() From the memory-barriers.txt document regarding memory barrier ordering guarantees: (*) These guarantees do not apply to bitfields, because compilers often generate code to modify…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:32:47.692Z. Updated 2026-05-11T21:51:39.547Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:51 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:32 WIB

CVE-2025-68357

iomap: allocate s_dio_done_wq for async reads as well

In the Linux kernel, the following vulnerability has been resolved: iomap: allocate s_dio_done_wq for async reads as well Since commit 222f2c7c6d14 ("iomap: always run error completions in user context"), read error completions are deferred to s_dio_done_wq. This means the workqueue also needs to be allocated for as…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:32:46.974Z. Updated 2026-05-23T16:02:44.515Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 23:02 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:32 WIB

CVE-2025-68356

gfs2: Prevent recursive memory reclaim

In the Linux kernel, the following vulnerability has been resolved: gfs2: Prevent recursive memory reclaim Function new_inode() returns a new inode with inode->i_mapping->gfp_mask set to GFP_HIGHUSER_MOVABLE. This value includes the __GFP_FS flag, so allocations in that address space can recurse into filesystem memo…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:32:46.275Z. Updated 2026-10-21T12:38:16.003Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Oct 2026, 19:38 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:32 WIB

CVE-2025-68355

bpf: Fix exclusive map memory leak

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix exclusive map memory leak When excl_prog_hash is 0 and excl_prog_hash_size is non-zero, the map also needs to be freed. Otherwise, the map memory will not be reclaimed, just like the memory leak problem reported by syzbot [1]. syzbot report…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:32:45.505Z. Updated 2026-05-11T21:51:36.018Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:51 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:32 WIB

CVE-2025-68354

regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex

In the Linux kernel, the following vulnerability has been resolved: regulator: core: Protect regulator_supply_alias_list with regulator_list_mutex regulator_supply_alias_list was accessed without any locking in regulator_supply_alias(), regulator_register_supply_alias(), and regulator_unregister_supply_alias(). Concu…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:32:44.840Z. Updated 2026-05-11T21:51:34.856Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:51 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:32 WIB

CVE-2025-68353

net: vxlan: prevent NULL deref in vxlan_xmit_one

In the Linux kernel, the following vulnerability has been resolved: net: vxlan: prevent NULL deref in vxlan_xmit_one Neither sock4 nor sock6 pointers are guaranteed to be non-NULL in vxlan_xmit_one, e.g. if the iface is brought down. This can lead to the following NULL dereference: BUG: kernel NULL pointer derefer…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:32:44.068Z. Updated 2026-10-21T12:38:14.894Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Oct 2026, 19:38 WIB

Official record

HighPublished 24 Dec 2025, 17:32 WIB

CVE-2025-68352

spi: ch341: fix out-of-bounds memory access in ch341_transfer_one

In the Linux kernel, the following vulnerability has been resolved: spi: ch341: fix out-of-bounds memory access in ch341_transfer_one Discovered by Atuin - Automated Vulnerability Discovery Engine. The 'len' variable is calculated as 'min(32, trans->len + 1)', which includes the 1-byte command header. When copying …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:32:43.366Z. Updated 2026-08-05T12:11:00.772Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 19:11 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:32 WIB

CVE-2025-68351

exfat: fix refcount leak in exfat_find

In the Linux kernel, the following vulnerability has been resolved: exfat: fix refcount leak in exfat_find Fix refcount leaks in `exfat_find` related to `exfat_get_dentry_set`. Function `exfat_get_dentry_set` would increase the reference counter of `es->bh` on success. Therefore, `exfat_put_dentry_set` must be calle…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:32:42.683Z. Updated 2026-05-27T09:28:13.537Z.

CVSS—KEVNot listedEPSSPresentUpdated27 May 2026, 16:28 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:32 WIB

CVE-2025-68350

exfat: fix divide-by-zero in exfat_allocate_bitmap

In the Linux kernel, the following vulnerability has been resolved: exfat: fix divide-by-zero in exfat_allocate_bitmap The variable max_ra_count can be 0 in exfat_allocate_bitmap(), which causes a divide-by-zero error in the subsequent modulo operation (i % max_ra_count), leading to a system crash. When max_ra_count …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:32:41.931Z. Updated 2026-05-11T21:51:30.130Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:51 WIB

Official record

HighPublished 24 Dec 2025, 17:32 WIB

CVE-2025-68349

NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid Fixes a crash when layout is null during this call stack: write_inode -> nfs4_write_inode -> pnfs_layoutcommit_inode pnfs_set_layoutcommit relies on the lseg ref…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:32:41.253Z. Updated 2026-10-15T01:09:54.275Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:09 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:32 WIB

CVE-2025-68348

block: fix memory leak in __blkdev_issue_zero_pages

In the Linux kernel, the following vulnerability has been resolved: block: fix memory leak in __blkdev_issue_zero_pages Move the fatal signal check before bio_alloc() to prevent a memory leak when BLKDEV_ZERO_KILLABLE is set and a fatal signal is pending. Previously, the bio was allocated before checking for a fatal…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:32:40.561Z. Updated 2026-05-11T21:51:27.551Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:51 WIB

Official record

HighPublished 24 Dec 2025, 17:32 WIB

CVE-2025-68347

ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events The DSP event handling code in hwdep_read() could write more bytes to the user buffer than requested, when a user provides a buffer smaller than the event header size (8 bytes). F…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:32:39.804Z. Updated 2026-10-16T15:09:43.312Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 22:09 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:32 WIB

CVE-2025-68346

ALSA: dice: fix buffer overflow in detect_stream_formats()

In the Linux kernel, the following vulnerability has been resolved: ALSA: dice: fix buffer overflow in detect_stream_formats() The function detect_stream_formats() reads the stream_count value directly from a FireWire device without validating it. This can lead to out-of-bounds writes when a malicious device provides…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:32:39.101Z. Updated 2026-05-11T21:51:25.174Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:51 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:32 WIB

CVE-2025-68345

ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi()

In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_hda_read_acpi() The acpi_get_first_physical_node() function can return NULL, in which case the get_device() function also returns NULL, but this value is then dereferenced without checking,s…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:32:38.378Z. Updated 2026-05-11T21:51:24.058Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:51 WIB

Official record

UnscoredPublished 24 Dec 2025, 17:32 WIB

CVE-2025-68344

ALSA: wavefront: Fix integer overflow in sample size validation

In the Linux kernel, the following vulnerability has been resolved: ALSA: wavefront: Fix integer overflow in sample size validation The wavefront_send_sample() function has an integer overflow issue when validating sample size. The header->size field is u32 but gets cast to int for comparison with dev->freemem Fix b…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-24T10:32:37.615Z. Updated 2026-05-11T21:51:22.916Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:51 WIB

Official record