Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,673 published records · 15 KEV · 3,673 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,673 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1654.5%
High96026%
Med1,12231%
Low1203.3%
None10.03%
Legacy00.00%
Unscored1,30536%

Matching records by UTC month

Feb 253,673

Signal coverage

KEV-listed: 15
With a forecast: 3,673
Unknown date: 0
Unscored severity: 1,305

Share of cohort: KEV 0.41% · forecast 100% · unscored 36%.

Showing 441–460 of 3,673By severity band: Critical · 9.0–10.0 165, High · 7.0–8.9 960, Medium · 4.0–6.9 1,122, Low · 0.1–3.9 120, None · scored 0.0 1, Legacy · v2 only 0, Unscored · no CNA metric 1,305

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49694

block: disable the elevator int del_gendisk

In the Linux kernel, the following vulnerability has been resolved: block: disable the elevator int del_gendisk The elevator is only used for file system requests, which are stopped in del_gendisk. Move disabling the elevator and freeing the scheduler tags to the end of del_gendisk instead of doing that work in disk…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:16.910Z. Updated 2026-05-11T19:04:54.796Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49693

drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf

In the Linux kernel, the following vulnerability has been resolved: drm/msm/mdp4: Fix refcount leak in mdp4_modeset_init_intf of_graph_get_remote_node() returns remote device node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount le…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 441 to 460 of 3673.First page Next page

Published 2025-02-26T02:24:16.263Z. Updated 2026-05-11T19:04:53.496Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49692

net: phy: at803x: fix NULL pointer dereference on AR9331 PHY

In the Linux kernel, the following vulnerability has been resolved: net: phy: at803x: fix NULL pointer dereference on AR9331 PHY Latest kernel will explode on the PHY interrupt config, since it depends now on allocated priv. So, run probe to allocate priv to fix it. ar9331_switch ethernet.1:10 lan0 (uninitialized):…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:15.616Z. Updated 2026-05-11T19:04:49.046Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49691

erspan: do not assume transport header is always set

In the Linux kernel, the following vulnerability has been resolved: erspan: do not assume transport header is always set Rewrite tests in ip6erspan_tunnel_xmit() and erspan_fb_xmit() to not assume transport header is set. syzbot reported: WARNING: CPU: 0 PID: 1350 at include/linux/skbuff.h:2911 skb_transport_header…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:15.146Z. Updated 2026-05-11T19:04:47.587Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49688

afs: Fix dynamic root getattr

In the Linux kernel, the following vulnerability has been resolved: afs: Fix dynamic root getattr The recent patch to make afs_getattr consult the server didn't account for the pseudo-inodes employed by the dynamic root-type afs superblock not having a volume or a server to access, and thus an oops occurs if such a d…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:13.686Z. Updated 2026-05-23T15:22:44.050Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:22 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49687

virtio_net: fix xdp_rxq_info bug after suspend/resume

In the Linux kernel, the following vulnerability has been resolved: virtio_net: fix xdp_rxq_info bug after suspend/resume The following sequence currently causes a driver bug warning when using virtio_net: # ip link set eth0 up # echo mem > /sys/power/state (or e.g. # rtcwake -s 10 -m mem) <resume> # ip link…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:13.187Z. Updated 2026-05-11T19:04:45.295Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49686

usb: gadget: uvc: fix list double add in uvcg_video_pump

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: fix list double add in uvcg_video_pump A panic can occur if the endpoint becomes disabled and the uvcg_video_pump adds the request back to the req_free list after it has already been queued to the endpoint. The endpoint complete wil…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:12.624Z. Updated 2026-05-11T19:04:44.109Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49685

iio: trigger: sysfs: fix use-after-free on remove

In the Linux kernel, the following vulnerability has been resolved: iio: trigger: sysfs: fix use-after-free on remove Ensure that the irq_work has completed before the trigger is freed. ================================================================== BUG: KASAN: use-after-free in irq_work_run_list Read of size …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:12.143Z. Updated 2026-05-11T19:04:42.944Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49684

iio: adc: aspeed: Fix refcount leak in aspeed_adc_set_trim_data

In the Linux kernel, the following vulnerability has been resolved: iio: adc: aspeed: Fix refcount leak in aspeed_adc_set_trim_data of_find_node_by_name() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() to avoid refcount leak.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:11.677Z. Updated 2026-05-11T19:04:41.752Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49683

iio: adc: adi-axi-adc: Fix refcount leak in adi_axi_adc_attach_client

In the Linux kernel, the following vulnerability has been resolved: iio: adc: adi-axi-adc: Fix refcount leak in adi_axi_adc_attach_client of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:11.201Z. Updated 2026-05-11T19:04:40.633Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49682

xtensa: Fix refcount leak bug in time.c

In the Linux kernel, the following vulnerability has been resolved: xtensa: Fix refcount leak bug in time.c In calibrate_ccount(), of_find_compatible_node() will return a node pointer with refcount incremented. We should use of_node_put() when it is not used anymore.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:10.703Z. Updated 2026-05-11T19:04:39.413Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49681

xtensa: xtfpga: Fix refcount leak bug in setup

In the Linux kernel, the following vulnerability has been resolved: xtensa: xtfpga: Fix refcount leak bug in setup In machine_setup(), of_find_compatible_node() will return a node pointer with refcount incremented. We should use of_node_put() when it is not used anymore.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:10.231Z. Updated 2026-05-11T19:04:38.129Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49680

ARM: exynos: Fix refcount leak in exynos_map_pmu

In the Linux kernel, the following vulnerability has been resolved: ARM: exynos: Fix refcount leak in exynos_map_pmu of_find_matching_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak. of_node_put() checks…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:09.762Z. Updated 2026-05-11T19:04:37.021Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49679

ARM: Fix refcount leak in axxia_boot_secondary

In the Linux kernel, the following vulnerability has been resolved: ARM: Fix refcount leak in axxia_boot_secondary of_find_compatible_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() to avoid refcount leak.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:09.299Z. Updated 2026-05-11T19:04:35.908Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49678

soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe

In the Linux kernel, the following vulnerability has been resolved: soc: bcm: brcmstb: pm: pm-arm: Fix refcount leak in brcmstb_pm_probe of_find_matching_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak. …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:08.833Z. Updated 2026-05-11T19:04:34.714Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49677

ARM: cns3xxx: Fix refcount leak in cns3xxx_init

In the Linux kernel, the following vulnerability has been resolved: ARM: cns3xxx: Fix refcount leak in cns3xxx_init of_find_compatible_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() to avoid refcount leak.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:08.366Z. Updated 2026-05-11T19:04:33.537Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49676

memory: samsung: exynos5422-dmc: Fix refcount leak in of_get_dram_timings

In the Linux kernel, the following vulnerability has been resolved: memory: samsung: exynos5422-dmc: Fix refcount leak in of_get_dram_timings of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. This function doesn't call of_node_put() in some e…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:07.905Z. Updated 2026-05-11T19:04:32.395Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49675

tick/nohz: unexport __init-annotated tick_nohz_full_setup()

In the Linux kernel, the following vulnerability has been resolved: tick/nohz: unexport __init-annotated tick_nohz_full_setup() EXPORT_SYMBOL and __init is a bad combination because the .init.text section is freed up after the initialization. Hence, modules cannot use symbols annotated __init. The access to a freed s…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:07.395Z. Updated 2026-05-11T19:04:31.296Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49674

dm raid: fix accesses beyond end of raid member array

In the Linux kernel, the following vulnerability has been resolved: dm raid: fix accesses beyond end of raid member array On dm-raid table load (using raid_ctr), dm-raid allocates an array rs->devs[rs->raid_disks] for the raid device members. rs->raid_disks is defined by the number of raid metadata and image tupples …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:06.636Z. Updated 2026-05-11T19:04:30.174Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49673

dm raid: fix KASAN warning in raid5_add_disks

In the Linux kernel, the following vulnerability has been resolved: dm raid: fix KASAN warning in raid5_add_disks There's a KASAN warning in raid5_add_disk when running the LVM testsuite. The warning happens in the test lvconvert-raid-reshape-linear_to_raid6-single-type.sh. We fix the warning by verifying that rdev->…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:05.945Z. Updated 2026-05-11T19:04:29.048Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record