Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 4,054 published records · 16 KEV · 4,054 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

4,054 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit2576.3%
High1,14328%
Med1,56539%
Low1323.3%
None10.02%
Legacy00.00%
Unscored95624%

Matching records by UTC month

Nov 244,054

Signal coverage

KEV-listed: 16
With a forecast: 4,054
Unknown date: 0
Unscored severity: 956

Share of cohort: KEV 0.39% · forecast 100% · unscored 24%.

Showing 3001–3020 of 4,054By severity band: Critical · 9.0–10.0 257, High · 7.0–8.9 1,143, Medium · 4.0–6.9 1,565, Low · 0.1–3.9 132, None · scored 0.0 1, Legacy · v2 only 0, Unscored · no CNA metric 956

HighPublished 09 Nov 2024, 17:15 WIB

CVE-2024-50253

bpf: Check the validity of nr_words in bpf_iter_bits_new()

In the Linux kernel, the following vulnerability has been resolved: bpf: Check the validity of nr_words in bpf_iter_bits_new() Check the validity of nr_words in bpf_iter_bits_new(). Without this check, when multiplication overflow occurs for nr_bits (e.g., when nr_words = 0x0400-0001, nr_bits becomes 64), stack corru…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-09T10:15:06.891Z. Updated 2026-08-05T11:42:47.547Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:42 WIB

Official record

UnscoredPublished 09 Nov 2024, 17:15 WIB

CVE-2024-50252

mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_ipip: Fix memory leak when changing remote IPv6 address The device stores IPv6 addresses that are used for encapsulation in linear memory that is managed by the driver. Changing the remote address of an ip6gre net device never worked…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Showing 3001 to 3020 of 4054.First page Next page

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-09T10:15:00.949Z. Updated 2026-05-11T20:48:31.577Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:48 WIB

Official record

UnscoredPublished 09 Nov 2024, 17:14 WIB

CVE-2024-50251

netfilter: nft_payload: sanitize offset and length before calling skb_checksum()

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_payload: sanitize offset and length before calling skb_checksum() If access to offset + length is larger than the skbuff length, then skb_checksum() triggers BUG_ON(). skb_checksum() internally subtracts the length parameter while ite…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-09T10:14:59.820Z. Updated 2026-10-15T00:57:36.202Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 07:57 WIB

Official record

HighPublished 09 Nov 2024, 17:14 WIB

CVE-2024-50250

fsdax: dax_unshare_iter needs to copy entire blocks

In the Linux kernel, the following vulnerability has been resolved: fsdax: dax_unshare_iter needs to copy entire blocks The code that copies data from srcmap to iomap in dax_unshare_iter is very very broken, which bfoster's recent fsx changes have exposed. If the pos and len passed to dax_file_unshare are not aligne…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-09T10:14:59.003Z. Updated 2026-08-05T11:42:46.493Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:42 WIB

Official record

UnscoredPublished 09 Nov 2024, 17:14 WIB

CVE-2024-50249

ACPI: CPPC: Make rmw_lock a raw_spin_lock

In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Make rmw_lock a raw_spin_lock The following BUG was triggered: ============================= [ BUG: Invalid wait context ] 6.12.0-rc2-XXX #406 Not tainted ----------------------------- kworker/1:1/62 is trying to lock: ffffff8801593030 (…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-09T10:14:57.833Z. Updated 2026-05-23T15:54:52.293Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:54 WIB

Official record

HighPublished 09 Nov 2024, 17:14 WIB

CVE-2024-50248

ntfs3: Add bounds checking to mi_enum_attr()

In the Linux kernel, the following vulnerability has been resolved: ntfs3: Add bounds checking to mi_enum_attr() Added bounds checking to make sure that every attr don't stray beyond valid memory region.

Excerpt language: en.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-09T10:14:56.965Z. Updated 2026-08-05T11:42:45.435Z.

CVSS7.1v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:42 WIB

Official record

HighPublished 09 Nov 2024, 17:14 WIB

CVE-2024-50247

fs/ntfs3: Check if more than chunk-size bytes are written

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Check if more than chunk-size bytes are written A incorrectly formatted chunk may decompress into more than LZNT_CHUNK_SIZE bytes and a index out of bounds will occur in s_max_off.

Excerpt language: en.

Severity high: primary CNA CVSS 7.3 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-09T10:14:56.165Z. Updated 2026-08-05T11:42:44.376Z.

CVSS7.3v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:42 WIB

Official record

HighPublished 09 Nov 2024, 17:14 WIB

CVE-2024-50246

fs/ntfs3: Add rough attr alloc_size check

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Add rough attr alloc_size check

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-09T10:14:55.218Z. Updated 2026-10-15T00:57:29.321Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated15 Oct 2026, 07:57 WIB

Official record

UnscoredPublished 09 Nov 2024, 17:14 WIB

CVE-2024-50245

fs/ntfs3: Fix possible deadlock in mi_read

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix possible deadlock in mi_read Mutex lock with another subclass used in ni_lock_dir().

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-09T10:14:54.403Z. Updated 2026-05-11T20:48:19.345Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:48 WIB

Official record

UnscoredPublished 09 Nov 2024, 17:14 WIB

CVE-2024-50244

fs/ntfs3: Additional check in ni_clear()

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Additional check in ni_clear() Checking of NTFS_FLAGS_LOG_REPLAYING added to prevent access to uninitialized bitmap during replay process.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-09T10:14:53.567Z. Updated 2026-05-11T20:48:18.126Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:48 WIB

Official record

UnscoredPublished 09 Nov 2024, 17:14 WIB

CVE-2024-50243

fs/ntfs3: Fix general protection fault in run_is_mapped_full

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix general protection fault in run_is_mapped_full Fixed deleating of a non-resident attribute in ntfs_create_inode() rollback.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-09T10:14:52.866Z. Updated 2026-05-11T20:48:16.964Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:48 WIB

Official record

UnscoredPublished 09 Nov 2024, 17:14 WIB

CVE-2024-50242

fs/ntfs3: Additional check in ntfs_file_release

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Additional check in ntfs_file_release

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-09T10:14:51.936Z. Updated 2026-05-11T20:48:15.825Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:48 WIB

Official record

HighPublished 09 Nov 2024, 17:14 WIB

CVE-2024-50241

NFSD: Initialize struct nfsd4_copy earlier

In the Linux kernel, the following vulnerability has been resolved: NFSD: Initialize struct nfsd4_copy earlier Ensure the refcount and async_copies fields are initialized early. cleanup_async_copy() will reference these fields if an error occurs in nfsd4_copy(). If they are not correctly initialized, at the very leas…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-09T10:14:51.119Z. Updated 2026-08-05T11:42:42.206Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:42 WIB

Official record

UnscoredPublished 09 Nov 2024, 17:14 WIB

CVE-2024-50240

phy: qcom: qmp-usb: fix NULL-deref on runtime suspend

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb: fix NULL-deref on runtime suspend Commit 413db06c05e7 ("phy: qcom-qmp-usb: clean up probe initialisation") removed most users of the platform device driver data, but mistakenly also removed the initialisation despite the data stil…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-09T10:14:50.117Z. Updated 2026-05-11T20:48:13.462Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:48 WIB

Official record

UnscoredPublished 09 Nov 2024, 17:14 WIB

CVE-2024-50239

phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usb-legacy: fix NULL-deref on runtime suspend Commit 413db06c05e7 ("phy: qcom-qmp-usb: clean up probe initialisation") removed most users of the platform device driver data from the qcom-qmp-usb driver, but mistakenly also removed the …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-09T10:14:49.171Z. Updated 2026-05-11T20:48:12.299Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:48 WIB

Official record

UnscoredPublished 09 Nov 2024, 17:14 WIB

CVE-2024-50238

phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend

In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: fix NULL-deref on runtime suspend Commit 413db06c05e7 ("phy: qcom-qmp-usb: clean up probe initialisation") removed most users of the platform device driver data from the qcom-qmp-usb driver, but mistakenly also removed the initia…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-09T10:14:48.115Z. Updated 2026-05-23T15:54:50.128Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:54 WIB

Official record

HighPublished 09 Nov 2024, 17:14 WIB

CVE-2024-50237

wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: do not pass a stopped vif to the driver in .get_txpower Avoid potentially crashing in the driver because of uninitialized private data

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-09T10:14:47.184Z. Updated 2026-08-05T11:42:41.148Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:42 WIB

Official record

UnscoredPublished 09 Nov 2024, 17:14 WIB

CVE-2024-50236

wifi: ath10k: Fix memory leak in management tx

In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: Fix memory leak in management tx In the current logic, memory is allocated for storing the MSDU context during management packet TX but this memory is not being freed during management TX completion. Similar leaks are seen in the manage…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-09T10:14:46.202Z. Updated 2026-05-11T20:48:08.586Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:48 WIB

Official record

HighPublished 09 Nov 2024, 17:14 WIB

CVE-2024-50235

wifi: cfg80211: clear wdev->cqm_config pointer on free

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: clear wdev->cqm_config pointer on free When we free wdev->cqm_config when unregistering, we also need to clear out the pointer since the same wdev/netdev may get re-registered in another network namespace, then destroyed later, runnin…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-09T10:14:45.222Z. Updated 2026-08-05T11:42:40.071Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:42 WIB

Official record

UnscoredPublished 09 Nov 2024, 17:14 WIB

CVE-2024-50234

wifi: iwlegacy: Clear stale interrupts before resuming device

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlegacy: Clear stale interrupts before resuming device iwl4965 fails upon resume from hibernation on my laptop. The reason seems to be a stale interrupt which isn't being cleared out before interrupts are enabled. We end up with a race beween …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-11-09T10:14:44.363Z. Updated 2026-05-11T20:47:58.687Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:47 WIB

Official record