Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,673 published records · 15 KEV · 3,673 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,673 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1654.5%
High96026%
Med1,12231%
Low1203.3%
None10.03%
Legacy00.00%
Unscored1,30536%

Matching records by UTC month

Feb 253,673

Signal coverage

KEV-listed: 15
With a forecast: 3,673
Unknown date: 0
Unscored severity: 1,305

Share of cohort: KEV 0.41% · forecast 100% · unscored 36%.

Showing 301–320 of 3,673By severity band: Critical · 9.0–10.0 165, High · 7.0–8.9 960, Medium · 4.0–6.9 1,122, Low · 0.1–3.9 120, None · scored 0.0 1, Legacy · v2 only 0, Unscored · no CNA metric 1,305

UnscoredPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57991

wifi: rtw89: chan: fix soft lockup in rtw89_entity_recalc_mgnt_roles()

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: chan: fix soft lockup in rtw89_entity_recalc_mgnt_roles() During rtw89_entity_recalc_mgnt_roles(), there is a normalizing process which will re-order the list if an entry with target pattern is found. And once one is found, should have a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:13.668Z. Updated 2026-05-11T21:01:41.352Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:01 WIB

Official record

HighPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57990

wifi: mt76: mt7925: fix off by one in mt7925_load_clc()

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix off by one in mt7925_load_clc() This comparison should be >= instead of > to prevent an out of bounds read and write.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:13.010Z. Updated 2026-08-05T11:47:13.777Z.

Showing 301 to 320 of 3673.First page Next page

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:47 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57989

wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix NULL deref check in mt7925_change_vif_links In mt7925_change_vif_links() devm_kzalloc() may return NULL but this returned value is not checked.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:12.286Z. Updated 2026-05-11T21:01:38.977Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:01 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57988

Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name()

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btbcm: Fix NULL deref in btbcm_get_board_name() devm_kstrdup() can return a NULL pointer on failure,but this returned value in btbcm_get_board_name() is not checked. Add NULL check in btbcm_get_board_name(), to handle kernel NULL pointer d…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:11.699Z. Updated 2026-05-11T21:01:37.850Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:01 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57987

Bluetooth: btrtl: check for NULL in btrtl_setup_realtek()

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btrtl: check for NULL in btrtl_setup_realtek() If insert an USB dongle which chip is not maintained in ic_id_table, it will hit the NULL point accessed. Add a null point check to avoid the Kernel Oops.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:11.114Z. Updated 2026-05-11T21:01:36.712Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:01 WIB

Official record

HighPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57986

HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections

In the Linux kernel, the following vulnerability has been resolved: HID: core: Fix assumption that Resolution Multipliers must be in Logical Collections A report in 2019 by the syzbot fuzzer was found to be connected to two errors in the HID core associated with Resolution Multipliers. One of the errors was fixed by…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:10.621Z. Updated 2026-10-15T01:01:13.153Z.

CVSS7.1v3.1KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:01 WIB

Official record

HighPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57985

firmware: qcom: scm: Cleanup global '__scm' on probe failures

In the Linux kernel, the following vulnerability has been resolved: firmware: qcom: scm: Cleanup global '__scm' on probe failures If SCM driver fails the probe, it should not leave global '__scm' variable assigned, because external users of this driver will assume the probe finished successfully. For example TZMEM p…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:09.983Z. Updated 2026-10-15T21:51:50.141Z.

CVSS7v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 04:51 WIB

Official record

HighPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57984

i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition

In the Linux kernel, the following vulnerability has been resolved: i3c: dw: Fix use-after-free in dw_i3c_master driver due to race condition In dw_i3c_common_probe, &master->hj_work is bound with dw_i3c_hj_work. And dw_i3c_master_irq_handler can call dw_i3c_master_irq_handle_ibis function to start the work. If we r…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:09.373Z. Updated 2026-08-05T11:47:10.554Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:47 WIB

Official record

HighPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57983

mailbox: th1520: Fix memory corruption due to incorrect array size

In the Linux kernel, the following vulnerability has been resolved: mailbox: th1520: Fix memory corruption due to incorrect array size The functions th1520_mbox_suspend_noirq and th1520_mbox_resume_noirq are intended to save and restore the interrupt mask registers in the MBOX ICU0. However, the array used to store t…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:08.774Z. Updated 2026-08-05T11:47:09.479Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:47 WIB

Official record

HighPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57982

xfrm: state: fix out-of-bounds read during lookup

In the Linux kernel, the following vulnerability has been resolved: xfrm: state: fix out-of-bounds read during lookup lookup and resize can run in parallel. The xfrm_state_hash_generation seqlock ensures a retry, but the hash functions can observe a hmask value that is too large for the new hlist array. rehash does…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:08.169Z. Updated 2026-08-05T11:47:08.401Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:47 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57981

usb: xhci: Fix NULL pointer dereference on certain command aborts

In the Linux kernel, the following vulnerability has been resolved: usb: xhci: Fix NULL pointer dereference on certain command aborts If a command is queued to the final usable TRB of a ring segment, the enqueue pointer is advanced to the subsequent link TRB and no further. If the command is later aborted, when the a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:07.489Z. Updated 2026-10-15T01:01:11.919Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:01 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57980

media: uvcvideo: Fix double free in error path

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Fix double free in error path If the uvc_status_init() function fails to allocate the int_urb, it will free the dev->status pointer but doesn't reset the pointer to NULL. This results in the kfree() call in uvc_status_cleanup() tryin…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:06.849Z. Updated 2026-10-15T01:01:10.477Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:01 WIB

Official record

HighPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57979

pps: Fix a use-after-free

In the Linux kernel, the following vulnerability has been resolved: pps: Fix a use-after-free On a board running ntpd and gpsd, I'm seeing a consistent use-after-free in sys_exit() from gpsd when rebooting: pps pps1: removed ------------[ cut here ]------------ kobject: '(null)' (00000000db4bec24): is no…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:06.168Z. Updated 2026-10-15T01:01:09.232Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:01 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57978

media: imx-jpeg: Fix potential error pointer dereference in detach_pm()

In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Fix potential error pointer dereference in detach_pm() The proble is on the first line: if (jpeg->pd_dev[i] && !pm_runtime_suspended(jpeg->pd_dev[i])) If jpeg->pd_dev[i] is an error pointer, then passing it to pm_runtime_suspended…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:05.593Z. Updated 2026-05-23T15:56:28.405Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:56 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57977

memcg: fix soft lockup in the OOM process

In the Linux kernel, the following vulnerability has been resolved: memcg: fix soft lockup in the OOM process A soft lockup issue was found in the product with about 56,000 tasks were in the OOM cgroup, it was traversing them when the soft lockup was triggered. watchdog: BUG: soft lockup - CPU#2 stuck for 23s! [VM T…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:04.943Z. Updated 2026-10-15T01:01:07.281Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:01 WIB

Official record

HighPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57976

btrfs: do proper folio cleanup when cow_file_range() failed

In the Linux kernel, the following vulnerability has been resolved: btrfs: do proper folio cleanup when cow_file_range() failed [BUG] When testing with COW fixup marked as BUG_ON() (this is involved with the new pin_user_pages*() change, which should not result new out-of-band dirty pages), I hit a crash triggered by…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:04.307Z. Updated 2026-10-21T12:35:47.157Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated21 Oct 2026, 19:35 WIB

Official record

HighPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57975

btrfs: do proper folio cleanup when run_delalloc_nocow() failed

In the Linux kernel, the following vulnerability has been resolved: btrfs: do proper folio cleanup when run_delalloc_nocow() failed [BUG] With CONFIG_DEBUG_VM set, test case generic/476 has some chance to crash with the following VM_BUG_ON_FOLIO(): BTRFS error (device dm-3): cow_file_range failed, start 1146880 en…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:03.586Z. Updated 2026-10-21T12:35:46.066Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated21 Oct 2026, 19:35 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57974

udp: Deal with race between UDP socket address change and rehash

In the Linux kernel, the following vulnerability has been resolved: udp: Deal with race between UDP socket address change and rehash If a UDP socket changes its local address while it's receiving datagrams, as a result of connect(), there is a period during which a lookup operation might fail to find it, after the ad…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:02.973Z. Updated 2026-10-21T12:35:44.056Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Oct 2026, 19:35 WIB

Official record

HighPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57973

rdma/cxgb4: Prevent potential integer overflow on 32bit

In the Linux kernel, the following vulnerability has been resolved: rdma/cxgb4: Prevent potential integer overflow on 32bit The "gl->tot_len" variable is controlled by the user. It comes from process_responses(). On 32bit systems, the "gl->tot_len + sizeof(struct cpl_pass_accept_req) + sizeof(struct rss_header)" ad…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 8.1 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:02.342Z. Updated 2026-10-15T21:51:50.000Z.

CVSS8.1v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 04:51 WIB

Official record

UnscoredPublished 27 Feb 2025, 09:07 WIB

CVE-2024-57953

rtc: tps6594: Fix integer overflow on 32bit systems

In the Linux kernel, the following vulnerability has been resolved: rtc: tps6594: Fix integer overflow on 32bit systems The problem is this multiply in tps6594_rtc_set_offset() tmp = offset * TICKS_PER_HOUR; The "tmp" variable is an s64 but "offset" is a long in the (-277774)-277774 range. On 32bit systems a long…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-27T02:07:01.598Z. Updated 2026-05-11T21:01:19.499Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:01 WIB

Official record