Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 4,319 published records · 16 KEV · 4,319 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

4,319 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2265.2%
High95922%
Med1,81142%
Low1283.0%
None00.00%
Legacy00.00%
Unscored1,19528%

Matching records by UTC month

Sep 254,319

Signal coverage

KEV-listed: 16
With a forecast: 4,319
Unknown date: 0
Unscored severity: 1,195

Share of cohort: KEV 0.37% · forecast 100% · unscored 28%.

Showing 2021–2040 of 4,319By severity band: Critical · 9.0–10.0 226, High · 7.0–8.9 959, Medium · 4.0–6.9 1,811, Low · 0.1–3.9 128, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 1,195

UnscoredPublished 16 Sep 2025, 15:11 WIB

CVE-2023-53299

md/raid10: fix leak of 'r10bio->remaining' for recovery

In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix leak of 'r10bio->remaining' for recovery raid10_sync_request() will add 'r10bio->remaining' for both rdev and replacement rdev. However, if the read io fails, recovery_request_write() returns without issuing the write io, in this case,…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T08:11:30.854Z. Updated 2026-05-11T19:42:15.615Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:42 WIB

Official record

UnscoredPublished 16 Sep 2025, 15:11 WIB

CVE-2023-53298

nfc: fix memory leak of se_io context in nfc_genl_se_io

In the Linux kernel, the following vulnerability has been resolved: nfc: fix memory leak of se_io context in nfc_genl_se_io The callback context for sending/receiving APDUs to/from the selected secure element is allocated inside nfc_genl_se_io and supposed to be eventually freed in se_io_cb callback function. However…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 2021 to 2040 of 4319.First page Next page

Published 2025-09-16T08:11:30.044Z. Updated 2026-05-11T19:42:14.483Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:42 WIB

Official record

HighPublished 16 Sep 2025, 15:11 WIB

CVE-2023-53297

Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp conn->chan_lock isn't acquired before l2cap_get_chan_by_scid, if l2cap_get_chan_by_scid returns NULL, then 'bad unlock balance' is triggered.

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T08:11:29.283Z. Updated 2026-08-05T09:13:24.678Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 16:13 WIB

Official record

UnscoredPublished 16 Sep 2025, 15:11 WIB

CVE-2023-53296

sctp: check send stream number after wait_for_sndbuf

In the Linux kernel, the following vulnerability has been resolved: sctp: check send stream number after wait_for_sndbuf This patch fixes a corner case where the asoc out stream count may change after wait_for_sndbuf. When the main thread in the client starts a connection, if its out stream count is set to N while t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T08:11:28.519Z. Updated 2026-05-11T19:42:12.034Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:42 WIB

Official record

UnscoredPublished 16 Sep 2025, 15:11 WIB

CVE-2023-53295

udf: Do not update file length for failed writes to inline files

In the Linux kernel, the following vulnerability has been resolved: udf: Do not update file length for failed writes to inline files When write to inline file fails (or happens only partly), we still updated length of inline data as if the whole write succeeded. Fix the update of length of inline data to happen only …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T08:11:27.678Z. Updated 2026-05-11T19:42:10.857Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:42 WIB

Official record

UnscoredPublished 16 Sep 2025, 15:11 WIB

CVE-2023-53294

fs/ntfs3: Fix null-ptr-deref on inode->i_op in ntfs_lookup()

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix null-ptr-deref on inode->i_op in ntfs_lookup() Syzbot reported a null-ptr-deref bug: ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) ntfs3: loop0: Mark volume as dirty due to NTFS errors general protection …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T08:11:26.926Z. Updated 2026-05-11T19:42:09.734Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:42 WIB

Official record

UnscoredPublished 16 Sep 2025, 15:11 WIB

CVE-2023-53292

blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none

In the Linux kernel, the following vulnerability has been resolved: blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none After grabbing q->sysfs_lock, q->elevator may become NULL because of elevator switch. Fix the NULL dereference on q->elevator by checking it with lock.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T08:11:24.583Z. Updated 2026-10-15T00:17:12.684Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 07:17 WIB

Official record

UnscoredPublished 16 Sep 2025, 15:11 WIB

CVE-2023-53291

rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale

In the Linux kernel, the following vulnerability has been resolved: rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale Running the 'kfree_rcu_test' test case [1] results in a splat [2]. The root cause is the kfree_scale_thread thread(s) continue running after unloading the rcuscale module. This…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T08:11:23.666Z. Updated 2026-05-11T19:42:07.259Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:42 WIB

Official record

UnscoredPublished 16 Sep 2025, 15:11 WIB

CVE-2023-53290

samples/bpf: Fix fout leak in hbm's run_bpf_prog

In the Linux kernel, the following vulnerability has been resolved: samples/bpf: Fix fout leak in hbm's run_bpf_prog Fix fout being fopen'ed but then not subsequently fclose'd. In the affected branch, fout is otherwise going out of scope.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T08:11:22.829Z. Updated 2026-05-11T19:42:06.068Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:42 WIB

Official record

UnscoredPublished 16 Sep 2025, 15:11 WIB

CVE-2023-53289

media: bdisp: Add missing check for create_workqueue

In the Linux kernel, the following vulnerability has been resolved: media: bdisp: Add missing check for create_workqueue Add the check for the return value of the create_workqueue in order to avoid NULL pointer dereference.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T08:11:21.984Z. Updated 2026-05-11T19:42:04.916Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:42 WIB

Official record

UnscoredPublished 16 Sep 2025, 15:11 WIB

CVE-2023-53288

drm/client: Fix memory leak in drm_client_modeset_probe

In the Linux kernel, the following vulnerability has been resolved: drm/client: Fix memory leak in drm_client_modeset_probe When a new mode is set to modeset->mode, the previous mode should be freed. This fixes the following kmemleak report: drm_mode_duplicate+0x45/0x220 [drm] drm_client_modeset_probe+0x944/0xf50 [d…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T08:11:21.150Z. Updated 2026-05-23T15:28:28.283Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:28 WIB

Official record

UnscoredPublished 16 Sep 2025, 15:11 WIB

CVE-2023-53287

usb: cdns3: Put the cdns set active part outside the spin lock

In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: Put the cdns set active part outside the spin lock The device may be scheduled during the resume process, so this cannot appear in atomic operations. Since pm_runtime_set_active will resume suppliers, put set active outside the spin lock,…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T08:11:20.304Z. Updated 2026-05-11T19:42:02.526Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:42 WIB

Official record

HighPublished 16 Sep 2025, 15:11 WIB

CVE-2023-53286

RDMA/mlx5: Return the firmware result upon destroying QP/RQ

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Return the firmware result upon destroying QP/RQ Previously when destroying a QP/RQ, the result of the firmware destruction function was ignored and upper layers weren't informed about the failure. Which in turn could lead to various probl…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T08:11:19.426Z. Updated 2026-08-05T09:13:23.607Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 16:13 WIB

Official record

HighPublished 16 Sep 2025, 15:11 WIB

CVE-2023-53285

ext4: add bounds checking in get_max_inline_xattr_value_size()

In the Linux kernel, the following vulnerability has been resolved: ext4: add bounds checking in get_max_inline_xattr_value_size() Normally the extended attributes in the inode body would have been checked when the inode is first opened, but if someone is writing to the block device while the file system is mounted, …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T08:11:18.585Z. Updated 2026-08-05T09:13:22.549Z.

CVSS7.1v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 16:13 WIB

Official record

UnscoredPublished 16 Sep 2025, 15:11 WIB

CVE-2023-53284

drm/msm/dpu: check for null return of devm_kzalloc() in dpu_writeback_init()

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: check for null return of devm_kzalloc() in dpu_writeback_init() Because of the possilble failure of devm_kzalloc(), dpu_wb_conn might be NULL and will cause null pointer dereference later. Therefore, it might be better to check it and d…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T08:11:17.741Z. Updated 2026-05-11T19:41:56.294Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:41 WIB

Official record

UnscoredPublished 16 Sep 2025, 15:11 WIB

CVE-2023-53282

scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write During the sysfs firmware write process, a use-after-free read warning is logged from the lpfc_wr_object() routine: BUG: KFENCE: use-after-free read in lpfc_wr_object+0x23…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T08:11:16.083Z. Updated 2026-05-11T19:41:54.402Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:41 WIB

Official record

UnscoredPublished 16 Sep 2025, 15:11 WIB

CVE-2023-53281

drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler()

In the Linux kernel, the following vulnerability has been resolved: drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() Commit 041879b12ddb ("drivers: staging: rtl8192bs: Fix deadlock in rtw_joinbss_event_prehandle()") besides fixing the deadlock also modified _rtw_join_timeout_handler() to use sp…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T08:11:15.364Z. Updated 2026-05-23T15:28:26.786Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:28 WIB

Official record

UnscoredPublished 16 Sep 2025, 15:11 WIB

CVE-2023-53280

scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue System crash when qla2x00_start_sp(sp) returns error code EGAIN and wake_up gets called for uninitialized wait queue sp->nvme_ls_waitq. qla2xxx [0000:37:00.1]-2121:5: Returning existing qpair…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T08:11:14.533Z. Updated 2026-05-11T19:41:52.164Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:41 WIB

Official record

UnscoredPublished 16 Sep 2025, 15:11 WIB

CVE-2023-53279

misc: vmw_balloon: fix memory leak with using debugfs_lookup()

In the Linux kernel, the following vulnerability has been resolved: misc: vmw_balloon: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead wh…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T08:11:13.712Z. Updated 2026-05-11T19:41:51.057Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:41 WIB

Official record

UnscoredPublished 16 Sep 2025, 15:11 WIB

CVE-2023-53278

ubifs: Fix memory leak in ubifs_sysfs_init()

In the Linux kernel, the following vulnerability has been resolved: ubifs: Fix memory leak in ubifs_sysfs_init() When insmod ubifs.ko, a kmemleak reported as below: unreferenced object 0xffff88817fb1a780 (size 8): comm "insmod", pid 25265, jiffies 4295239702 (age 100.130s) hex dump (first 8 bytes): 75 62…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-16T08:11:12.997Z. Updated 2026-05-11T19:41:49.895Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:41 WIB

Official record