Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,673 published records · 15 KEV · 3,673 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,673 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1654.5%
High96026%
Med1,12231%
Low1203.3%
None10.03%
Legacy00.00%
Unscored1,30536%

Matching records by UTC month

Feb 253,673

Signal coverage

KEV-listed: 15
With a forecast: 3,673
Unknown date: 0
Unscored severity: 1,305

Share of cohort: KEV 0.41% · forecast 100% · unscored 36%.

Showing 461–480 of 3,673By severity band: Critical · 9.0–10.0 165, High · 7.0–8.9 960, Medium · 4.0–6.9 1,122, Low · 0.1–3.9 120, None · scored 0.0 1, Legacy · v2 only 0, Unscored · no CNA metric 1,305

HighPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49672

net: tun: unlink NAPI from device on destruction

In the Linux kernel, the following vulnerability has been resolved: net: tun: unlink NAPI from device on destruction Syzbot found a race between tun file and device destruction. NAPIs live in struct tun_file which can get destroyed before the netdev so we have to del them explicitly. The current code is missing delet…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:05.284Z. Updated 2026-08-05T08:56:01.503Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 15:56 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49671

RDMA/cm: Fix memory leak in ib_cm_insert_listen

In the Linux kernel, the following vulnerability has been resolved: RDMA/cm: Fix memory leak in ib_cm_insert_listen cm_alloc_id_priv() allocates resource for the cm_id_priv. When cm_init_listen() fails it doesn't free it, leading to memory leak. Add the missing error unwind.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 461 to 480 of 3673.First page Next page

Published 2025-02-26T02:24:04.608Z. Updated 2026-05-11T19:04:26.723Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

HighPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49670

linux/dim: Fix divide by 0 in RDMA DIM

In the Linux kernel, the following vulnerability has been resolved: linux/dim: Fix divide by 0 in RDMA DIM Fix a divide 0 error in rdma_dim_stats_compare() when prev->cpe_ratio == 0. CallTrace: Hardware name: H3C R4900 G3/RS33M2C9S, BIOS 2.00.37P21 03/12/2020 task: ffff880194b78000 task.stack: ffffc90006714000 …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:03.938Z. Updated 2026-08-05T08:56:00.433Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 15:56 WIB

Official record

HighPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49669

mptcp: fix race on unaccepted mptcp sockets

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix race on unaccepted mptcp sockets When the listener socket owning the relevant request is closed, it frees the unaccepted subflows and that causes later deletion of the paired MPTCP sockets. The mptcp socket's worker can run in the time in…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:03.290Z. Updated 2026-08-05T08:55:59.359Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 15:55 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49668

PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events

In the Linux kernel, the following vulnerability has been resolved: PM / devfreq: exynos-ppmu: Fix refcount leak in of_get_devfreq_events of_get_child_by_name() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. This function only calls of_node_put() in normal path, missing…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:02.662Z. Updated 2026-05-11T19:04:22.983Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

HighPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49667

net: bonding: fix use-after-free after 802.3ad slave unbind

In the Linux kernel, the following vulnerability has been resolved: net: bonding: fix use-after-free after 802.3ad slave unbind commit 0622cab0341c ("bonding: fix 802.3ad aggregator reselection"), resolve case, when there is several aggregation groups in the same bond. bond_3ad_unbind_slave will invalidate (clear) ag…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:01.818Z. Updated 2026-08-05T08:55:58.300Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 15:55 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49666

powerpc/memhotplug: Add add_pages override for PPC

In the Linux kernel, the following vulnerability has been resolved: powerpc/memhotplug: Add add_pages override for PPC With commit ffa0b64e3be5 ("powerpc: Fix virt_addr_valid() for 64-bit Book3E & 32-bit") the kernel now validate the addr against high_memory value. This results in the below BUG_ON with dax pfns. [ …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:01.148Z. Updated 2026-05-23T15:22:42.733Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:22 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49665

platform/x86: thinkpad_acpi: Fix a memory leak of EFCH MMIO resource

In the Linux kernel, the following vulnerability has been resolved: platform/x86: thinkpad_acpi: Fix a memory leak of EFCH MMIO resource Unlike release_mem_region(), a call to release_resource() does not free the resource, so it has to be freed explicitly to avoid a memory leak.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:00.496Z. Updated 2026-05-11T19:04:19.552Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

HighPublished 26 Feb 2025, 09:23 WIB

CVE-2022-49664

tipc: move bc link creation back to tipc_node_create

In the Linux kernel, the following vulnerability has been resolved: tipc: move bc link creation back to tipc_node_create Shuang Li reported a NULL pointer dereference crash: [] BUG: kernel NULL pointer dereference, address: 0000000000000068 [] RIP: 0010:tipc_link_is_up+0x5/0x10 [tipc] [] Call Trace: [] <IRQ…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.5 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:23:59.792Z. Updated 2026-08-05T08:55:57.231Z.

CVSS7.5v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 15:55 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:23 WIB

CVE-2022-49663

tunnels: do not assume mac header is set in skb_tunnel_check_pmtu()

In the Linux kernel, the following vulnerability has been resolved: tunnels: do not assume mac header is set in skb_tunnel_check_pmtu() Recently added debug in commit f9aefd6b2aa3 ("net: warn if mac header was not set") caught a bug in skb_tunnel_check_pmtu(), as shown in this syzbot report [1]. In ndo_start_xmit() …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:23:59.311Z. Updated 2026-05-11T19:04:17.290Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:23 WIB

CVE-2022-49662

ipv6: fix lockdep splat in in6_dump_addrs()

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix lockdep splat in in6_dump_addrs() As reported by syzbot, we should not use rcu_dereference() when rcu_read_lock() is not held. WARNING: suspicious RCU usage 5.19.0-rc2-syzkaller #0 Not tainted net/ipv6/addrconf.c:5175 suspicious rcu_deref…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:23:58.824Z. Updated 2026-07-24T14:33:11.583Z.

CVSS—KEVNot listedEPSSPresentUpdated24 Jul 2026, 21:33 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:23 WIB

CVE-2022-49661

can: gs_usb: gs_usb_open/close(): fix memory leak

In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_open/close(): fix memory leak The gs_usb driver appears to suffer from a malady common to many USB CAN adapter drivers in that it performs usb_alloc_coherent() to allocate a number of USB request blocks (URBs) for RX, and then lat…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:23:58.352Z. Updated 2026-05-11T19:04:14.924Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:23 WIB

CVE-2022-49659

can: m_can: m_can_{read_fifo,echo_tx_event}(): shift timestamp to full 32 bits

In the Linux kernel, the following vulnerability has been resolved: can: m_can: m_can_{read_fifo,echo_tx_event}(): shift timestamp to full 32 bits In commit 1be37d3b0414 ("can: m_can: fix periph RX path: use rx-offload to ensure skbs are sent from softirq context") the RX path for peripheral devices was switched to R…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:23:57.411Z. Updated 2026-05-11T19:04:13.638Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:23 WIB

CVE-2022-49658

bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_vals Kuee reported a corner case where the tnum becomes constant after the call to __reg_bound_offset(), but the register's bounds are not, that is, its min bounds are still not equa…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:23:56.922Z. Updated 2026-05-11T19:04:12.523Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:23 WIB

CVE-2022-49657

usbnet: fix memory leak in error case

In the Linux kernel, the following vulnerability has been resolved: usbnet: fix memory leak in error case usbnet_write_cmd_async() mixed up which buffers need to be freed in which error case. v2: add Fixes tag v3: fix uninitialized buf pointer

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:23:56.417Z. Updated 2026-05-11T19:04:11.376Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:23 WIB

CVE-2022-49656

ARM: meson: Fix refcount leak in meson_smp_prepare_cpus

In the Linux kernel, the following vulnerability has been resolved: ARM: meson: Fix refcount leak in meson_smp_prepare_cpus of_find_compatible_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when done. Add missing of_node_put() to avoid refcount leak.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:23:55.949Z. Updated 2026-05-11T19:04:10.145Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:23 WIB

CVE-2022-49655

fscache: Fix invalidation/lookup race

In the Linux kernel, the following vulnerability has been resolved: fscache: Fix invalidation/lookup race If an NFS file is opened for writing and closed, fscache_invalidate() will be asked to invalidate the file - however, if the cookie is in the LOOKING_UP state (or the CREATING state), then request to invalidate d…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:23:55.483Z. Updated 2026-05-11T19:04:08.999Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:23 WIB

CVE-2022-49654

net: dsa: qca8k: reset cpu port on MTU change

In the Linux kernel, the following vulnerability has been resolved: net: dsa: qca8k: reset cpu port on MTU change It was discovered that the Documentation lacks of a fundamental detail on how to correctly change the MAX_FRAME_SIZE of the switch. In fact if the MAX_FRAME_SIZE is changed while the cpu port is on, the …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:23:54.966Z. Updated 2026-05-11T19:04:07.843Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:23 WIB

CVE-2022-49653

i2c: piix4: Fix a memory leak in the EFCH MMIO support

In the Linux kernel, the following vulnerability has been resolved: i2c: piix4: Fix a memory leak in the EFCH MMIO support The recently added support for EFCH MMIO regions introduced a memory leak in that code path. The leak is caused by the fact that release_resource() merely removes the resource from the tree but d…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:23:54.484Z. Updated 2026-05-23T15:22:40.191Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:22 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:23 WIB

CVE-2022-49652

dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: Fix refcount leak in ti_dra7_xbar_route_allocate of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not needed anymore. Add missing of_node_put() in to fix this.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:23:53.995Z. Updated 2026-05-11T19:04:05.570Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record