Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 5,493 published records · 23 KEV · 5,493 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

5,493 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit3175.8%
High1,53028%
Med2,03937%
Low1262.3%
None10.02%
Legacy00.00%
Unscored1,48027%

Matching records by UTC month

Dec 255,493

Signal coverage

KEV-listed: 23
With a forecast: 5,493
Unknown date: 0
Unscored severity: 1,480

Share of cohort: KEV 0.42% · forecast 100% · unscored 27%.

Showing 341–360 of 5,493By severity band: Critical · 9.0–10.0 317, High · 7.0–8.9 1,530, Medium · 4.0–6.9 2,039, Low · 0.1–3.9 126, None · scored 0.0 1, Legacy · v2 only 0, Unscored · no CNA metric 1,480

HighPublished 30 Dec 2025, 19:23 WIB

CVE-2023-54285

iomap: Fix possible overflow condition in iomap_write_delalloc_scan

In the Linux kernel, the following vulnerability has been resolved: iomap: Fix possible overflow condition in iomap_write_delalloc_scan folio_next_index() returns an unsigned long value which left shifted by PAGE_SHIFT could possibly cause an overflow on 32-bit system. Instead use folio_pos(folio) + folio_size(folio)…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:23:25.770Z. Updated 2026-10-15T21:41:44.022Z.

CVSS7.1v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 04:41 WIB

Official record

HighPublished 30 Dec 2025, 19:23 WIB

CVE-2023-54284

media: av7110: prevent underflow in write_ts_to_decoder()

In the Linux kernel, the following vulnerability has been resolved: media: av7110: prevent underflow in write_ts_to_decoder() The buf[4] value comes from the user via ts_play(). It is a value in the u8 range. The final length we pass to av7110_ipack_instant_repack() is "len - (buf[4] + 1) - 4" so add a check to ens…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 341 to 360 of 5493.First page Next page

Published 2025-12-30T12:23:25.116Z. Updated 2026-08-05T09:18:55.094Z.

CVSS7.1v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 16:18 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:23 WIB

CVE-2023-54283

bpf: Address KCSAN report on bpf_lru_list

In the Linux kernel, the following vulnerability has been resolved: bpf: Address KCSAN report on bpf_lru_list KCSAN reported a data-race when accessing node->ref. Although node->ref does not have to be accurate, take this chance to use a more common READ_ONCE() and WRITE_ONCE() pattern instead of data_race(). There …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:23:24.460Z. Updated 2026-05-11T19:58:58.681Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:58 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:23 WIB

CVE-2023-54282

media: tuners: qt1010: replace BUG_ON with a regular error

In the Linux kernel, the following vulnerability has been resolved: media: tuners: qt1010: replace BUG_ON with a regular error BUG_ON is unnecessary here, and in addition it confuses smatch. Replacing this with an error return help resolve this smatch warning: drivers/media/tuners/qt1010.c:350 qt1010_init() error: b…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:23:23.792Z. Updated 2026-05-11T19:58:57.532Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:58 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:23 WIB

CVE-2023-54281

btrfs: release path before inode lookup during the ino lookup ioctl

In the Linux kernel, the following vulnerability has been resolved: btrfs: release path before inode lookup during the ino lookup ioctl During the ino lookup ioctl we can end up calling btrfs_iget() to get an inode reference while we are holding on a root's btree. If btrfs_iget() needs to lookup the inode from the ro…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:23:23.122Z. Updated 2026-05-11T19:58:56.391Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:58 WIB

Official record

CritPublished 30 Dec 2025, 19:23 WIB

CVE-2023-54280

cifs: fix potential race when tree connecting ipc

In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential race when tree connecting ipc Protect access of TCP_Server_Info::hostname when building the ipc tree name as it might get freed in cifsd thread and thus causing an use-after-free bug in __tree_connect_dfs_target(). Also, while at…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity critical: primary CNA CVSS 9.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:23:22.335Z. Updated 2026-10-15T21:41:43.877Z.

CVSS9.8v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 04:41 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:23 WIB

CVE-2022-50883

bpf: Prevent decl_tag from being referenced in func_proto arg

In the Linux kernel, the following vulnerability has been resolved: bpf: Prevent decl_tag from being referenced in func_proto arg Syzkaller managed to hit another decl_tag issue: btf_func_proto_check kernel/bpf/btf.c:4506 [inline] btf_check_all_types kernel/bpf/btf.c:4734 [inline] btf_parse_type_sec+0x1175/0x1…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:23:21.675Z. Updated 2026-05-11T19:26:58.510Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:26 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:23 WIB

CVE-2022-50882

media: uvcvideo: Fix memory leak in uvc_gpio_parse

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix memory leak in uvc_gpio_parse Previously the unit buffer was allocated before checking the IRQ for privacy GPIO. In case of error, the unit buffer was leaked. Allocate the unit buffer after the IRQ to avoid it. Addresses-Coveri…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:23:21.019Z. Updated 2026-05-11T19:26:57.345Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:26 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:23 WIB

CVE-2022-50881

wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect() This patch fixes a use-after-free in ath9k that occurs in ath9k_hif_usb_disconnect() when ath9k_destroy_wmi() is trying to access 'drv_priv' that has already been freed by ieee80211_free_h…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:23:20.343Z. Updated 2026-05-23T15:25:24.938Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:25 WIB

Official record

HighPublished 30 Dec 2025, 19:23 WIB

CVE-2022-50880

wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: add peer map clean up for peer delete in ath10k_sta_state() When peer delete failed in a disconnect operation, use-after-free detected by KFENCE in below log. It is because for each vdev_id and address, it has only one struct ath10k_pee…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:23:19.551Z. Updated 2026-10-15T21:41:24.432Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 04:41 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:23 WIB

CVE-2022-50879

objtool: Fix SEGFAULT

In the Linux kernel, the following vulnerability has been resolved: objtool: Fix SEGFAULT find_insn() will return NULL in case of failure. Check insn in order to avoid a kernel Oops for NULL pointer dereference.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:23:18.858Z. Updated 2026-05-23T15:25:23.270Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:25 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:23 WIB

CVE-2022-50878

gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init()

In the Linux kernel, the following vulnerability has been resolved: gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init() A NULL check for bridge->encoder shows that it may be NULL, but it already been dereferenced on all paths leading to the check. 812 if (!bridge->encoder) { Dereference the …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:23:18.173Z. Updated 2026-05-11T19:26:52.621Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:26 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:23 WIB

CVE-2022-50877

net: broadcom: bcm4908_enet: update TX stats after actual transmission

In the Linux kernel, the following vulnerability has been resolved: net: broadcom: bcm4908_enet: update TX stats after actual transmission Queueing packets doesn't guarantee their transmission. Update TX stats after hardware confirms consuming submitted data. This also fixes a possible race and NULL dereference. bcm…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:23:17.466Z. Updated 2026-05-11T19:26:51.390Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:26 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:23 WIB

CVE-2022-50876

usb: musb: Fix musb_gadget.c rxstate overflow bug

In the Linux kernel, the following vulnerability has been resolved: usb: musb: Fix musb_gadget.c rxstate overflow bug The usb function device call musb_gadget_queue() adds the passed request to musb_ep::req_list,If the (request->length > musb_ep->packet_sz) and (is_buffer_mapped(req) return false),the rxstate() will …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:23:16.790Z. Updated 2026-05-11T19:26:50.207Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:26 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:23 WIB

CVE-2022-50875

of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop()

In the Linux kernel, the following vulnerability has been resolved: of: overlay: fix null pointer dereferencing in find_dup_cset_node_entry() and find_dup_cset_prop() When kmalloc() fail to allocate memory in kasprintf(), fn_1 or fn_2 will be NULL, and strcmp() will cause null pointer dereference.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:23:16.108Z. Updated 2026-05-11T19:26:49.069Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:26 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:23 WIB

CVE-2022-50874

RDMA/erdma: Fix refcount leak in erdma_mmap

In the Linux kernel, the following vulnerability has been resolved: RDMA/erdma: Fix refcount leak in erdma_mmap rdma_user_mmap_entry_get() take reference, we should release it when not need anymore, add the missing rdma_user_mmap_entry_put() in the error path to fix it.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:23:15.388Z. Updated 2026-05-11T19:26:47.947Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:26 WIB

Official record

MedPublished 30 Dec 2025, 19:22 WIB

CVE-2025-14426

Strong Testimonials <= 3.2.18 - Missing Authorization to Authenticated (Contributor+) Rating Meta Update

The Strong Testimonials plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check in the 'edit_rating' function in all versions up to, and including, 3.2.18. This makes it possible for authenticated attackers with Contributor-level access and above to modify or delete the…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 4.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:22:35.514Z. Updated 2026-04-08T17:21:32.717Z.

CVSS4.3v3.1KEVNot listedEPSSPresentUpdated09 Apr 2026, 00:21 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:16 WIB

CVE-2023-54279

MIPS: fw: Allow firmware to pass a empty env

In the Linux kernel, the following vulnerability has been resolved: MIPS: fw: Allow firmware to pass a empty env fw_getenv will use env entry to determine style of env, however it is legal for firmware to just pass a empty list. Check if first entry exist before running strchr to avoid null pointer dereference.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:16:07.018Z. Updated 2026-05-11T19:58:54.080Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:58 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:16 WIB

CVE-2023-54278

s390/vmem: split pages when debug pagealloc is enabled

In the Linux kernel, the following vulnerability has been resolved: s390/vmem: split pages when debug pagealloc is enabled Since commit bb1520d581a3 ("s390/mm: start kernel with DAT enabled") the kernel crashes early during boot when debug pagealloc is enabled: mem auto-init: stack:off, heap alloc:off, heap free:off…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:16:06.350Z. Updated 2026-05-11T19:58:52.943Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:58 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:16 WIB

CVE-2023-54277

fbdev: udlfb: Fix endpoint check

In the Linux kernel, the following vulnerability has been resolved: fbdev: udlfb: Fix endpoint check The syzbot fuzzer detected a problem in the udlfb driver, caused by an endpoint not having the expected type: usb 1-1: Read EDID byte 0 failed: -71 usb 1-1: Unable to get valid EDID from device/display ------------[ …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:16:05.690Z. Updated 2026-05-23T15:35:03.102Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:35 WIB

Official record