Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 4,319 published records · 16 KEV · 4,319 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

4,319 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2265.2%
High95922%
Med1,81142%
Low1283.0%
None00.00%
Legacy00.00%
Unscored1,19528%

Matching records by UTC month

Sep 254,319

Signal coverage

KEV-listed: 16
With a forecast: 4,319
Unknown date: 0
Unscored severity: 1,195

Share of cohort: KEV 0.37% · forecast 100% · unscored 28%.

Showing 2301–2320 of 4,319By severity band: Critical · 9.0–10.0 226, High · 7.0–8.9 959, Medium · 4.0–6.9 1,811, Low · 0.1–3.9 128, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 1,195

HighPublished 15 Sep 2025, 21:21 WIB

CVE-2023-53219

media: netup_unidvb: fix use-after-free at del_timer()

In the Linux kernel, the following vulnerability has been resolved: media: netup_unidvb: fix use-after-free at del_timer() When Universal DVB card is detaching, netup_unidvb_dma_fini() uses del_timer() to stop dma->timeout timer. But when timer handler netup_unidvb_dma_timeout() is running, del_timer() could not stop…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-15T14:21:47.459Z. Updated 2026-08-05T09:13:09.656Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 16:13 WIB

Official record

UnscoredPublished 15 Sep 2025, 21:21 WIB

CVE-2023-53218

rxrpc: Make it so that a waiting process can be aborted

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Make it so that a waiting process can be aborted When sendmsg() creates an rxrpc call, it queues it to wait for a connection and channel to be assigned and then waits before it can start shovelling data as the encrypted DATA packet content inc…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 2301 to 2320 of 4319.First page Next page

Published 2025-09-15T14:21:45.843Z. Updated 2026-05-11T19:40:32.870Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:40 WIB

Official record

UnscoredPublished 15 Sep 2025, 21:21 WIB

CVE-2023-53217

nubus: Partially revert proc_create_single_data() conversion

In the Linux kernel, the following vulnerability has been resolved: nubus: Partially revert proc_create_single_data() conversion The conversion to proc_create_single_data() introduced a regression whereby reading a file in /proc/bus/nubus results in a seg fault: # grep -r . /proc/bus/nubus/e/ Data read fault…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-15T14:21:44.831Z. Updated 2026-05-11T19:40:31.745Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:40 WIB

Official record

HighPublished 15 Sep 2025, 21:21 WIB

CVE-2023-53216

arm64: efi: Make efi_rt_lock a raw_spinlock

In the Linux kernel, the following vulnerability has been resolved: arm64: efi: Make efi_rt_lock a raw_spinlock Running a rt-kernel base on 6.2.0-rc3-rt1 on an Ampere Altra outputs the following: BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:46 in_atomic(): 1, irqs_disabled():…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-15T14:21:43.935Z. Updated 2026-08-05T09:13:08.599Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 16:13 WIB

Official record

UnscoredPublished 15 Sep 2025, 21:21 WIB

CVE-2023-53215

sched/fair: Don't balance task to its current running CPU

In the Linux kernel, the following vulnerability has been resolved: sched/fair: Don't balance task to its current running CPU We've run into the case that the balancer tries to balance a migration disabled task and trigger the warning in set_task_cpu() like below: ------------[ cut here ]------------ WARNING: CPU:…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-15T14:21:43.107Z. Updated 2026-05-11T19:40:29.419Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:40 WIB

Official record

HighPublished 15 Sep 2025, 21:21 WIB

CVE-2023-53214

f2fs: fix to avoid potential memory corruption in __update_iostat_latency()

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid potential memory corruption in __update_iostat_latency() Add iotype sanity check to avoid potential memory corruption. This is to fix the compile error below: fs/f2fs/iostat.c:231 __update_iostat_latency() error: buffer overflow '…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-15T14:21:42.331Z. Updated 2026-08-05T09:13:07.520Z.

CVSS7v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 16:13 WIB

Official record

HighPublished 15 Sep 2025, 21:21 WIB

CVE-2023-53213

wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() Fix a slab-out-of-bounds read that occurs in kmemdup() called from brcmf_get_assoc_ies(). The bug could occur when assoc_info->req_len, data from a URB provided by a USB device, is bigg…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-15T14:21:41.433Z. Updated 2026-08-05T09:13:06.440Z.

CVSS8.1v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 16:13 WIB

Official record

UnscoredPublished 15 Sep 2025, 21:21 WIB

CVE-2023-53211

driver core: location: Free struct acpi_pld_info *pld before return false

In the Linux kernel, the following vulnerability has been resolved: driver core: location: Free struct acpi_pld_info *pld before return false struct acpi_pld_info *pld should be freed before the return of allocation failure, to prevent memory leak, add the ACPI_FREE() to fix it.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-15T14:21:39.682Z. Updated 2026-05-11T19:40:25.817Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:40 WIB

Official record

UnscoredPublished 15 Sep 2025, 21:21 WIB

CVE-2023-53210

md/raid5-cache: fix null-ptr-deref for r5l_flush_stripe_to_raid()

In the Linux kernel, the following vulnerability has been resolved: md/raid5-cache: fix null-ptr-deref for r5l_flush_stripe_to_raid() r5l_flush_stripe_to_raid() will check if the list 'flushing_ios' is empty, and then submit 'flush_bio', however, r5l_log_flush_endio() is clearing the list first and then clear the bio…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-15T14:21:38.534Z. Updated 2026-05-11T19:40:24.649Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:40 WIB

Official record

UnscoredPublished 15 Sep 2025, 21:21 WIB

CVE-2023-53209

wifi: mac80211_hwsim: Fix possible NULL dereference

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: Fix possible NULL dereference In a call to mac80211_hwsim_select_tx_link() the sta pointer might be NULL, thus need to check that it is not NULL before accessing it.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-15T14:21:37.415Z. Updated 2026-05-11T19:40:23.407Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:40 WIB

Official record

UnscoredPublished 15 Sep 2025, 21:21 WIB

CVE-2023-53208

KVM: nSVM: Load L1's TSC multiplier based on L1 state, not L2 state

In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Load L1's TSC multiplier based on L1 state, not L2 state When emulating nested VM-Exit, load L1's TSC multiplier if L1's desired ratio doesn't match the current ratio, not if the ratio L1 is using for L2 diverges from the default. Functio…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-15T14:21:36.170Z. Updated 2026-05-11T19:40:22.251Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:40 WIB

Official record

UnscoredPublished 15 Sep 2025, 21:21 WIB

CVE-2023-53207

ublk: fail to recover device if queue setup is interrupted

In the Linux kernel, the following vulnerability has been resolved: ublk: fail to recover device if queue setup is interrupted In ublk_ctrl_end_recovery(), if wait_for_completion_interruptible() is interrupted by signal, queues aren't setup successfully yet, so we have to fail UBLK_CMD_END_USER_RECOVERY, otherwise ke…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-15T14:21:35.378Z. Updated 2026-05-11T19:40:20.965Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:40 WIB

Official record

UnscoredPublished 15 Sep 2025, 21:21 WIB

CVE-2023-53206

hwmon: (pmbus_core) Fix NULL pointer dereference

In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus_core) Fix NULL pointer dereference Pass i2c_client to _pmbus_is_enabled to drop the assumption that a regulator device is passed in. This will fix the issue of a NULL pointer dereference when called from _pmbus_get_flags.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-15T14:21:34.551Z. Updated 2026-05-11T19:40:19.806Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:40 WIB

Official record

HighPublished 15 Sep 2025, 21:21 WIB

CVE-2023-53205

KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler

In the Linux kernel, the following vulnerability has been resolved: KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler We do check for target CPU == -1, but this might change at the time we are going to use it. Hold the physical target CPU in a local variable to avoid out-of-bound accesses to t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-15T14:21:33.560Z. Updated 2026-10-15T21:41:27.937Z.

CVSS7.3v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 04:41 WIB

Official record

UnscoredPublished 15 Sep 2025, 21:21 WIB

CVE-2023-53204

af_unix: Fix data-races around user->unix_inflight.

In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix data-races around user->unix_inflight. user->unix_inflight is changed under spin_lock(unix_gc_lock), but too_many_unix_fds() reads it locklessly. Let's annotate the write/read accesses to user->unix_inflight. BUG: KCSAN: data-race in u…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-15T14:21:32.696Z. Updated 2026-05-23T15:28:14.623Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:28 WIB

Official record

UnscoredPublished 15 Sep 2025, 21:21 WIB

CVE-2023-53203

wifi: mt76: mt7996: rely on mt76_connac2_mac_tx_rate_val

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: rely on mt76_connac2_mac_tx_rate_val In order to fix a possible NULL pointer dereference in mt7996_mac_write_txwi() of vif pointer, export mt76_connac2_mac_tx_rate_val utility routine and reuse it in mt7996 driver.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-15T14:21:31.843Z. Updated 2026-05-11T19:40:16.295Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:40 WIB

Official record

UnscoredPublished 15 Sep 2025, 21:21 WIB

CVE-2023-53202

PM: domains: fix memory leak with using debugfs_lookup()

In the Linux kernel, the following vulnerability has been resolved: PM: domains: fix memory leak with using debugfs_lookup() When calling debugfs_lookup() the result must have dput() called on it, otherwise the memory will leak over time. To make things simpler, just call debugfs_lookup_and_remove() instead which ha…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-15T14:21:30.703Z. Updated 2026-05-11T19:40:15.085Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:40 WIB

Official record

UnscoredPublished 15 Sep 2025, 21:21 WIB

CVE-2023-53201

RDMA/bnxt_re: wraparound mbox producer index

In the Linux kernel, the following vulnerability has been resolved: RDMA/bnxt_re: wraparound mbox producer index Driver is not handling the wraparound of the mbox producer index correctly. Currently the wraparound happens once u32 max is reached. Bit 31 of the producer index register is special and should be set onl…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-15T14:21:29.476Z. Updated 2026-05-11T19:40:13.916Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:40 WIB

Official record

UnscoredPublished 15 Sep 2025, 21:21 WIB

CVE-2023-53200

netfilter: x_tables: fix percpu counter block leak on error path when creating new netns

In the Linux kernel, the following vulnerability has been resolved: netfilter: x_tables: fix percpu counter block leak on error path when creating new netns Here is the stack where we allocate percpu counter block: +-< __alloc_percpu +-< xt_percpu_counter_alloc +-< find_check_entry # {arp,ip,ip6}_tables.…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-15T14:21:28.466Z. Updated 2026-05-11T19:40:12.748Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:40 WIB

Official record

UnscoredPublished 15 Sep 2025, 21:21 WIB

CVE-2023-53199

wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails Syzkaller detected a memory leak of skbs in ath9k_hif_usb_rx_stream(). While processing skbs in ath9k_hif_usb_rx_stream(), the already allocated skbs in skb_pool are not freed if …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-09-15T14:21:27.451Z. Updated 2026-05-11T19:40:11.576Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:40 WIB

Official record