Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,433 published records · 11 KEV · 3,433 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,433 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1935.6%
High95028%
Med1,50344%
Low752.2%
None00.00%
Legacy00.00%
Unscored71221%

Matching records by UTC month

Dec 243,433

Signal coverage

KEV-listed: 11
With a forecast: 3,433
Unknown date: 0
Unscored severity: 712

Share of cohort: KEV 0.32% · forecast 100% · unscored 21%.

Showing 381–400 of 3,433By severity band: Critical · 9.0–10.0 193, High · 7.0–8.9 950, Medium · 4.0–6.9 1,503, Low · 0.1–3.9 75, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 712

UnscoredPublished 27 Dec 2024, 21:50 WIB

CVE-2024-56588

scsi: hisi_sas: Create all dump files during debugfs initialization

In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Create all dump files during debugfs initialization For the current debugfs of hisi_sas, after user triggers dump, the driver allocate memory space to save the register information and create debugfs files to display the saved informa…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:50:56.214Z. Updated 2026-05-11T20:55:21.812Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:55 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:50 WIB

CVE-2024-56587

leds: class: Protect brightness_show() with led_cdev->led_access mutex

In the Linux kernel, the following vulnerability has been resolved: leds: class: Protect brightness_show() with led_cdev->led_access mutex There is NULL pointer issue observed if from Process A where hid device being added which results in adding a led_cdev addition and later a another call to access of led_cdev attr…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 381 to 400 of 3433.First page Next page

Published 2024-12-27T14:50:55.402Z. Updated 2026-05-11T20:55:20.639Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:55 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:50 WIB

CVE-2024-56586

f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode.

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix f2fs_bug_on when uninstalling filesystem call f2fs_evict_inode. creating a large files during checkpoint disable until it runs out of space and then delete it, then remount to enable checkpoint again, and then unmount the filesystem trigger…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:50:54.378Z. Updated 2026-05-11T20:55:19.450Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:55 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:50 WIB

CVE-2024-56585

LoongArch: Fix sleeping in atomic context for PREEMPT_RT

In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix sleeping in atomic context for PREEMPT_RT Commit bab1c299f3945ffe79 ("LoongArch: Fix sleeping in atomic context in setup_tlb_handler()") changes the gfp flag from GFP_KERNEL to GFP_ATOMIC for alloc_pages_node(). However, for PREEMPT_RT…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:50:53.471Z. Updated 2026-05-11T20:55:18.298Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:55 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:50 WIB

CVE-2024-56584

io_uring/tctx: work around xa_store() allocation error issue

In the Linux kernel, the following vulnerability has been resolved: io_uring/tctx: work around xa_store() allocation error issue syzbot triggered the following WARN_ON: WARNING: CPU: 0 PID: 16 at io_uring/tctx.c:51 __io_uring_free+0xfa/0x140 io_uring/tctx.c:51 which is the WARN_ON_ONCE(!xa_empty(&tctx->xa)); sani…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:50:52.735Z. Updated 2026-05-11T20:55:17.165Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:55 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:50 WIB

CVE-2024-56583

sched/deadline: Fix warning in migrate_enable for boosted tasks

In the Linux kernel, the following vulnerability has been resolved: sched/deadline: Fix warning in migrate_enable for boosted tasks When running the following command: while true; do stress-ng --cyclic 30 --timeout 30s --minimize --quiet done a warning is eventually triggered: WARNING: CPU: 43 PID: 2848 at ker…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:50:51.781Z. Updated 2026-05-23T15:55:40.637Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:55 WIB

Official record

MedPublished 27 Dec 2024, 21:31 WIB

CVE-2024-12984

Amcrest IP2M-841B Web Interface webCapsConfig information disclosure

A vulnerability classified as problematic has been found in Amcrest IP2M-841B, IP2M-841W, IPC-IP2M-841B, IPC-IP3M-943B, IPC-IP3M-943S, IPC-IP3M-HX2B and IPC-IPM-721S up to 20241211. This affects an unknown part of the file /web_caps/webCapsConfig of the component Web Interface. The manipulation leads to information dis…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:31:05.483Z. Updated 2024-12-27T14:53:46.976Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated27 Dec 2024, 21:53 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:23 WIB

CVE-2024-56582

btrfs: fix use-after-free in btrfs_encoded_read_endio()

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free in btrfs_encoded_read_endio() Shinichiro reported the following use-after free that sometimes is happening in our CI system when running fstests' btrfs/284 on a TCMU runner device: BUG: KASAN: slab-use-after-free in lock_…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:23:23.851Z. Updated 2026-05-11T20:55:14.844Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:55 WIB

Official record

HighPublished 27 Dec 2024, 21:23 WIB

CVE-2024-56581

btrfs: ref-verify: fix use-after-free after invalid ref action

In the Linux kernel, the following vulnerability has been resolved: btrfs: ref-verify: fix use-after-free after invalid ref action At btrfs_ref_tree_mod() after we successfully inserted the new ref entry (local variable 'ref') into the respective block entry's rbtree (local variable 'be'), if we find an unexpected ac…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:23:23.193Z. Updated 2026-08-05T11:45:11.349Z.

CVSS7v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:45 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:23 WIB

CVE-2024-56580

media: qcom: camss: fix error path on configuration of power domains

In the Linux kernel, the following vulnerability has been resolved: media: qcom: camss: fix error path on configuration of power domains There is a chance to meet runtime issues during configuration of CAMSS power domains, because on the error path dev_pm_domain_detach() is unexpectedly called with NULL or error poin…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:23:22.380Z. Updated 2026-05-11T20:55:12.418Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:55 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:23 WIB

CVE-2024-56579

media: amphion: Set video drvdata before register video device

In the Linux kernel, the following vulnerability has been resolved: media: amphion: Set video drvdata before register video device The video drvdata should be set before the video device is registered, otherwise video_drvdata() may return NULL in the open() file ops, and led to oops.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:23:21.438Z. Updated 2026-05-11T20:55:11.281Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:55 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:23 WIB

CVE-2024-56578

media: imx-jpeg: Set video drvdata before register video device

In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Set video drvdata before register video device The video drvdata should be set before the video device is registered, otherwise video_drvdata() may return NULL in the open() file ops, and led to oops.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:23:20.659Z. Updated 2026-05-11T20:55:10.135Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:55 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:23 WIB

CVE-2024-56577

media: mtk-jpeg: Fix null-ptr-deref during unload module

In the Linux kernel, the following vulnerability has been resolved: media: mtk-jpeg: Fix null-ptr-deref during unload module The workqueue should be destroyed in mtk_jpeg_core.c since commit 09aea13ecf6f ("media: mtk-jpeg: refactor some variables"), otherwise the below calltrace can be easily triggered. [ 677.86251…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:23:19.725Z. Updated 2026-05-11T20:55:08.981Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:55 WIB

Official record

HighPublished 27 Dec 2024, 21:23 WIB

CVE-2024-56576

media: i2c: tc358743: Fix crash in the probe error path when using polling

In the Linux kernel, the following vulnerability has been resolved: media: i2c: tc358743: Fix crash in the probe error path when using polling If an error occurs in the probe() function, we should remove the polling timer that was alarmed earlier, otherwise the timer is called with arguments that are already freed, w…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:23:18.792Z. Updated 2026-08-05T11:45:09.933Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:45 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:23 WIB

CVE-2024-56575

media: imx-jpeg: Ensure power suppliers be suspended before detach them

In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Ensure power suppliers be suspended before detach them The power suppliers are always requested to suspend asynchronously, dev_pm_domain_detach() requires the caller to ensure proper synchronization of this function with power manage…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:23:17.925Z. Updated 2026-05-11T20:55:06.606Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:55 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:23 WIB

CVE-2024-56574

media: ts2020: fix null-ptr-deref in ts2020_probe()

In the Linux kernel, the following vulnerability has been resolved: media: ts2020: fix null-ptr-deref in ts2020_probe() KASAN reported a null-ptr-deref issue when executing the following command: # echo ts2020 0x20 > /sys/bus/i2c/devices/i2c-0/new_device KASAN: null-ptr-deref in range [0x0000000000000010-0x000…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:23:17.177Z. Updated 2026-05-11T20:55:05.098Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:55 WIB

Official record

HighPublished 27 Dec 2024, 21:23 WIB

CVE-2024-56573

efi/libstub: Free correct pointer on failure

In the Linux kernel, the following vulnerability has been resolved: efi/libstub: Free correct pointer on failure cmdline_ptr is an out parameter, which is not allocated by the function itself, and likely points into the caller's stack. cmdline refers to the pool allocation that should be freed when cleaning up after…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:23:16.231Z. Updated 2026-08-05T11:45:08.677Z.

CVSS7v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:45 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:23 WIB

CVE-2024-56572

media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal()

In the Linux kernel, the following vulnerability has been resolved: media: platform: allegro-dvt: Fix possible memory leak in allocate_buffers_internal() The buffer in the loop should be released under the exception path, otherwise there may be a memory leak here. To mitigate this, free the buffer when allegro_alloc…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:23:15.298Z. Updated 2026-05-11T20:55:00.721Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:55 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:23 WIB

CVE-2024-56570

ovl: Filter invalid inodes with missing lookup function

In the Linux kernel, the following vulnerability has been resolved: ovl: Filter invalid inodes with missing lookup function Add a check to the ovl_dentry_weird() function to prevent the processing of directory inodes that lack the lookup function. This is important because such inodes can cause errors in overlayfs wh…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:23:13.273Z. Updated 2026-10-15T00:59:28.215Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 07:59 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:23 WIB

CVE-2024-56569

ftrace: Fix regression with module command in stack_trace_filter

In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix regression with module command in stack_trace_filter When executing the following command: # echo "write*:mod:ext3" > /sys/kernel/tracing/stack_trace_filter The current mod command causes a null pointer dereference. While commit 0f1…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:23:12.462Z. Updated 2026-10-15T00:59:21.242Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 07:59 WIB

Official record