Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 4,319 published records · 16 KEV · 4,319 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

4,319 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2265.2%
High95922%
Med1,81142%
Low1283.0%
None00.00%
Legacy00.00%
Unscored1,19528%

Matching records by UTC month

Sep 254,319

Signal coverage

KEV-listed: 16
With a forecast: 4,319
Unknown date: 0
Unscored severity: 1,195

Share of cohort: KEV 0.37% · forecast 100% · unscored 28%.

Showing 2661–2680 of 4,319By severity band: Critical · 9.0–10.0 226, High · 7.0–8.9 959, Medium · 4.0–6.9 1,811, Low · 0.1–3.9 128, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 1,195

UnscoredPublished 11 Sep 2025, 23:56 WIB

CVE-2025-39782

jbd2: prevent softlockup in jbd2_log_do_checkpoint()

In the Linux kernel, the following vulnerability has been resolved: jbd2: prevent softlockup in jbd2_log_do_checkpoint() Both jbd2_log_do_checkpoint() and jbd2_journal_shrink_checkpoint_list() periodically release j_list_lock after processing a batch of buffers to avoid long hold times on the j_list_lock. However, si…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T16:56:32.616Z. Updated 2026-10-15T01:08:18.107Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:08 WIB

Official record

UnscoredPublished 11 Sep 2025, 23:56 WIB

CVE-2025-39781

parisc: Drop WARN_ON_ONCE() from flush_cache_vmap

In the Linux kernel, the following vulnerability has been resolved: parisc: Drop WARN_ON_ONCE() from flush_cache_vmap I have observed warning to occassionally trigger.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T16:56:31.909Z. Updated 2026-05-23T16:00:42.792Z.

Showing 2661 to 2680 of 4319.First page Next page

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 23:00 WIB

Official record

HighPublished 11 Sep 2025, 23:56 WIB

CVE-2025-39780

sched/ext: Fix invalid task state transitions on class switch

In the Linux kernel, the following vulnerability has been resolved: sched/ext: Fix invalid task state transitions on class switch When enabling a sched_ext scheduler, we may trigger invalid task state transitions, resulting in warnings like the following (which can be easily reproduced by running the hotplug selftest…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T16:56:31.142Z. Updated 2026-08-05T12:05:05.360Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 19:05 WIB

Official record

HighPublished 11 Sep 2025, 23:56 WIB

CVE-2025-39779

btrfs: subpage: keep TOWRITE tag until folio is cleaned

In the Linux kernel, the following vulnerability has been resolved: btrfs: subpage: keep TOWRITE tag until folio is cleaned btrfs_subpage_set_writeback() calls folio_start_writeback() the first time a folio is written back, and it also clears the PAGECACHE_TAG_TOWRITE tag even if there are still dirty blocks in the f…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T16:56:30.395Z. Updated 2026-08-05T12:05:04.307Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 19:05 WIB

Official record

UnscoredPublished 11 Sep 2025, 23:56 WIB

CVE-2025-39777

crypto: acomp - Fix CFI failure due to type punning

In the Linux kernel, the following vulnerability has been resolved: crypto: acomp - Fix CFI failure due to type punning To avoid a crash when control flow integrity is enabled, make the workspace ("stream") free function use a consistent type, and call it through a function pointer that has that same type.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T16:56:29.638Z. Updated 2026-05-11T21:36:05.342Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:36 WIB

Official record

HighPublished 11 Sep 2025, 23:56 WIB

CVE-2025-39776

mm/debug_vm_pgtable: clear page table entries at destroy_args()

In the Linux kernel, the following vulnerability has been resolved: mm/debug_vm_pgtable: clear page table entries at destroy_args() The mm/debug_vm_pagetable test allocates manually page table entries for the tests it runs, using also its manually allocated mm_struct. That in itself is ok, but when it exits, at dest…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T16:56:28.936Z. Updated 2026-10-15T22:02:31.643Z.

CVSS7v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 05:02 WIB

Official record

UnscoredPublished 11 Sep 2025, 23:56 WIB

CVE-2025-39775

mm/mremap: fix WARN with uffd that has remap events disabled

In the Linux kernel, the following vulnerability has been resolved: mm/mremap: fix WARN with uffd that has remap events disabled Registering userfaultd on a VMA that spans at least one PMD and then mremap()'ing that VMA can trigger a WARN when recovering from a failed page table move due to a page table allocation er…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T16:56:28.230Z. Updated 2026-10-21T12:37:20.574Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Oct 2026, 19:37 WIB

Official record

UnscoredPublished 11 Sep 2025, 23:56 WIB

CVE-2025-39774

iio: adc: rzg2l_adc: Set driver data before enabling runtime PM

In the Linux kernel, the following vulnerability has been resolved: iio: adc: rzg2l_adc: Set driver data before enabling runtime PM When stress-testing the system by repeatedly unbinding and binding the ADC device in a loop, and the ADC is a supplier for another device (e.g., a thermal hardware block that reads tempe…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T16:56:27.505Z. Updated 2026-05-11T21:36:00.218Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:36 WIB

Official record

UnscoredPublished 11 Sep 2025, 23:56 WIB

CVE-2025-39773

net: bridge: fix soft lockup in br_multicast_query_expired()

In the Linux kernel, the following vulnerability has been resolved: net: bridge: fix soft lockup in br_multicast_query_expired() When set multicast_query_interval to a large value, the local variable 'time' in br_multicast_send_query() may overflow. If the time is smaller than jiffies, the timer will expire immediate…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T16:56:26.820Z. Updated 2026-10-15T01:08:16.402Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:08 WIB

Official record

UnscoredPublished 11 Sep 2025, 23:56 WIB

CVE-2025-39772

drm/hisilicon/hibmc: fix the hibmc loaded failed bug

In the Linux kernel, the following vulnerability has been resolved: drm/hisilicon/hibmc: fix the hibmc loaded failed bug When hibmc loaded failed, the driver use hibmc_unload to free the resource, but the mutexes in mode.config are not init, which will access an NULL pointer. Just change goto statement to return, bec…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T16:56:26.130Z. Updated 2026-05-12T12:06:54.311Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 19:06 WIB

Official record

UnscoredPublished 11 Sep 2025, 23:56 WIB

CVE-2025-39771

regulator: pca9450: Use devm_register_sys_off_handler

In the Linux kernel, the following vulnerability has been resolved: regulator: pca9450: Use devm_register_sys_off_handler With module test, there is error dump: ------------[ cut here ]------------ notifier callback pca9450_i2c_restart_handler already registered WARNING: kernel/notifier.c:23 at notifier_chain_reg…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T16:56:25.209Z. Updated 2026-05-11T21:35:56.415Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:35 WIB

Official record

HighPublished 11 Sep 2025, 23:56 WIB

CVE-2025-39770

net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM

In the Linux kernel, the following vulnerability has been resolved: net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM When performing Generic Segmentation Offload (GSO) on an IPv6 packet that contains extension headers, the kernel incorrectly requests checksum offload if the egress device only …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T16:56:24.446Z. Updated 2026-10-15T01:08:14.404Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:08 WIB

Official record

UnscoredPublished 11 Sep 2025, 23:56 WIB

CVE-2025-39769

bnxt_en: Fix lockdep warning during rmmod

In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Fix lockdep warning during rmmod The commit under the Fixes tag added a netdev_assert_locked() in bnxt_free_ntp_fltrs(). The lock should be held during normal run-time but the assert will be triggered (see below) during bnxt_remove_one() wh…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T16:56:23.694Z. Updated 2026-05-11T21:35:54.088Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:35 WIB

Official record

UnscoredPublished 11 Sep 2025, 23:56 WIB

CVE-2025-39768

net/mlx5: HWS, fix complex rules rehash error flow

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, fix complex rules rehash error flow Moving rules from matcher to matcher should not fail. However, if it does fail due to various reasons, the error flow should allow the kernel to continue functioning (albeit with broken steering rule…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T16:56:22.984Z. Updated 2026-05-11T21:35:52.915Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:35 WIB

Official record

UnscoredPublished 11 Sep 2025, 23:56 WIB

CVE-2025-39767

LoongArch: Optimize module load time by optimizing PLT/GOT counting

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Optimize module load time by optimizing PLT/GOT counting When enabling CONFIG_KASAN, CONFIG_PREEMPT_VOLUNTARY_BUILD and CONFIG_PREEMPT_VOLUNTARY at the same time, there will be soft deadlock, the relevant logs are as follows: rcu: INFO: r…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T16:56:22.238Z. Updated 2026-05-11T21:35:51.760Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:35 WIB

Official record

UnscoredPublished 11 Sep 2025, 23:56 WIB

CVE-2025-39766

net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit

In the Linux kernel, the following vulnerability has been resolved: net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit The following setup can trigger a WARNING in htb_activate due to the condition: !cl->leaf.q->q.qlen tc qdisc del dev lo root tc qdisc add dev lo root handle 1: htb default 1 tc c…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T16:56:21.514Z. Updated 2026-06-11T18:44:07.476Z.

CVSS—KEVNot listedEPSSPresentUpdated12 Jun 2026, 01:44 WIB

Official record

UnscoredPublished 11 Sep 2025, 23:56 WIB

CVE-2025-39765

ALSA: timer: fix ida_free call while not allocated

In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: fix ida_free call while not allocated In the snd_utimer_create() function, if the kasprintf() function return NULL, snd_utimer_put_id() will be called, finally use ida_free() to free the unallocated id 0. the syzkaller reported the foll…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T16:56:20.738Z. Updated 2026-05-11T21:35:49.504Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:35 WIB

Official record

UnscoredPublished 11 Sep 2025, 23:52 WIB

CVE-2025-39764

netfilter: ctnetlink: remove refcounting in expectation dumpers

In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: remove refcounting in expectation dumpers Same pattern as previous patch: do not keep the expectation object alive via refcount, only store a cookie value and then use that as the skip hint for dump resumption. AFAICS this has …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T16:52:32.060Z. Updated 2026-10-15T01:08:12.652Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:08 WIB

Official record

UnscoredPublished 11 Sep 2025, 23:52 WIB

CVE-2025-39763

ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered

In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI: send SIGBUS to current task if synchronous memory error not recovered If a synchronous error is detected as a result of user-space process triggering a 2-bit uncorrected error, the CPU will take a synchronous error exception such as Synch…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T16:52:31.350Z. Updated 2026-05-23T16:00:39.327Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 23:00 WIB

Official record

UnscoredPublished 11 Sep 2025, 23:52 WIB

CVE-2025-39762

drm/amd/display: add null check

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: add null check [WHY] Prevents null pointer dereferences to enhance function robustness [HOW] Adds early null check and return false if invalid.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-11T16:52:30.647Z. Updated 2026-05-11T21:35:46.034Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:35 WIB

Official record