Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,433 published records · 11 KEV · 3,433 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,433 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1935.6%
High95028%
Med1,50344%
Low752.2%
None00.00%
Legacy00.00%
Unscored71221%

Matching records by UTC month

Dec 243,433

Signal coverage

KEV-listed: 11
With a forecast: 3,433
Unknown date: 0
Unscored severity: 712

Share of cohort: KEV 0.32% · forecast 100% · unscored 21%.

Showing 421–440 of 3,433By severity band: Critical · 9.0–10.0 193, High · 7.0–8.9 950, Medium · 4.0–6.9 1,503, Low · 0.1–3.9 75, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 712

HighPublished 27 Dec 2024, 21:11 WIB

CVE-2024-56548

hfsplus: don't query the device logical block size multiple times

In the Linux kernel, the following vulnerability has been resolved: hfsplus: don't query the device logical block size multiple times Devices block sizes may change. One of these cases is a loop device by using ioctl LOOP_SET_BLOCK_SIZE. While this may cause other issues like IO being rejected, in the case of hfsplu…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:11:29.373Z. Updated 2026-08-05T11:44:57.408Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:44 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:11 WIB

CVE-2024-56547

rcu/nocb: Fix missed RCU barrier on deoffloading

In the Linux kernel, the following vulnerability has been resolved: rcu/nocb: Fix missed RCU barrier on deoffloading Currently, running rcutorture test with torture_type=rcu fwd_progress=8 n_barrier_cbs=8 nocbs_nthreads=8 nocbs_toggle=100 onoff_interval=60 test_boost=2, will trigger the following warning: WARNING: …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 421 to 440 of 3433.First page Next page

Published 2024-12-27T14:11:28.548Z. Updated 2026-05-11T20:54:27.563Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:54 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:11 WIB

CVE-2024-56546

drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend()

In the Linux kernel, the following vulnerability has been resolved: drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend() If we fail to allocate memory for cb_data by kmalloc, the memory allocation for eve_data is never freed, add the missing kfree() in the error handling path.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:11:27.626Z. Updated 2026-05-11T20:54:26.394Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:54 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:11 WIB

CVE-2024-56545

HID: hyperv: streamline driver probe to avoid devres issues

In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: streamline driver probe to avoid devres issues It was found that unloading 'hid_hyperv' module results in a devres complaint: ... hv_vmbus: unregistering driver hid_hyperv ------------[ cut here ]------------ WARNING: CPU: 2 PID: 39…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:11:26.722Z. Updated 2026-10-03T10:55:22.956Z.

CVSS—KEVNot listedEPSSPresentUpdated03 Oct 2026, 17:55 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:11 WIB

CVE-2024-56544

udmabuf: change folios array from kmalloc to kvmalloc

In the Linux kernel, the following vulnerability has been resolved: udmabuf: change folios array from kmalloc to kvmalloc When PAGE_SIZE 4096, MAX_PAGE_ORDER 10, 64bit machine, page_alloc only support 4MB. If above this, trigger this warn and return NULL. udmabuf can change size limit, if change it to 3072(3GB), and…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:11:25.801Z. Updated 2026-10-21T12:35:37.155Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Oct 2026, 19:35 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:11 WIB

CVE-2024-56543

wifi: ath12k: Skip Rx TID cleanup for self peer

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Skip Rx TID cleanup for self peer During peer create, dp setup for the peer is done where Rx TID is updated for all the TIDs. Peer object for self peer will not go through dp setup. When core halts, dp cleanup is done for all the peers…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:11:24.971Z. Updated 2026-05-11T20:54:22.982Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:54 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:11 WIB

CVE-2024-56542

drm/amd/display: fix a memleak issue when driver is removed

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix a memleak issue when driver is removed Running "modprobe amdgpu" the second time (followed by a modprobe -r amdgpu) causes a call trace like: [ 845.212163] Memory manager not clean during takedown. [ 845.212170] WARNING: CPU: …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:11:24.149Z. Updated 2026-05-23T15:55:36.411Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:55 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:11 WIB

CVE-2024-56541

wifi: ath12k: fix use-after-free in ath12k_dp_cc_cleanup()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix use-after-free in ath12k_dp_cc_cleanup() During ath12k module removal, in ath12k_core_deinit(), ath12k_mac_destroy() un-registers ah->hw from mac80211 and frees the ah->hw as well as all the ar's in it. After this ath12k_core_soc_de…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:11:23.219Z. Updated 2026-05-11T20:54:20.640Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:54 WIB

Official record

HighPublished 27 Dec 2024, 21:11 WIB

CVE-2024-56540

accel/ivpu: Prevent recovery invocation during probe and resume

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Prevent recovery invocation during probe and resume Refactor IPC send and receive functions to allow correct handling of operations that should not trigger a recovery process. Expose ivpu_send_receive_internal(), which is now utilized by…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:11:22.207Z. Updated 2026-08-05T11:44:56.351Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:44 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:11 WIB

CVE-2024-56539

wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()

In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() Replace one-element array with a flexible-array member in `struct mwifiex_ie_types_wildcard_ssid_params` to fix the following warning on a MT8173 Chromebook (mt8173-elm…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:11:21.487Z. Updated 2026-05-11T20:54:12.871Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:54 WIB

Official record

HighPublished 27 Dec 2024, 21:11 WIB

CVE-2024-56538

drm: zynqmp_kms: Unplug DRM device before removal

In the Linux kernel, the following vulnerability has been resolved: drm: zynqmp_kms: Unplug DRM device before removal Prevent userspace accesses to the DRM device from causing use-after-frees by unplugging the device before we remove it. This causes any further userspace accesses to result in an error without further…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:11:20.685Z. Updated 2026-08-05T11:44:55.251Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:44 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:11 WIB

CVE-2024-56537

drm: xlnx: zynqmp_disp: layer may be null while releasing

In the Linux kernel, the following vulnerability has been resolved: drm: xlnx: zynqmp_disp: layer may be null while releasing layer->info can be null if we have an error on the first layer in zynqmp_disp_create_layers

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:11:19.743Z. Updated 2026-05-11T20:54:09.532Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:54 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:11 WIB

CVE-2024-56536

wifi: cw1200: Fix potential NULL dereference

In the Linux kernel, the following vulnerability has been resolved: wifi: cw1200: Fix potential NULL dereference A recent refactoring was identified by static analysis to cause a potential NULL dereference, fix this!

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:11:18.921Z. Updated 2026-05-11T20:54:08.344Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:54 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:11 WIB

CVE-2024-56535

wifi: rtw89: coex: check NULL return of kmalloc in btc_fw_set_monreg()

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89: coex: check NULL return of kmalloc in btc_fw_set_monreg() kmalloc may fail, return value might be NULL and will cause NULL pointer dereference. Add check NULL return of kmalloc in btc_fw_set_monreg().

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:11:18.174Z. Updated 2026-05-11T20:54:07.214Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:54 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:11 WIB

CVE-2024-56534

isofs: avoid memory leak in iocharset

In the Linux kernel, the following vulnerability has been resolved: isofs: avoid memory leak in iocharset A memleak was found as below: unreferenced object 0xffff0000d10164d8 (size 8): comm "pool-udisksd", pid 108217, jiffies 4295408555 hex dump (first 8 bytes): 75 74 66 38 00 cc cc cc …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:11:17.091Z. Updated 2026-05-11T20:54:06.067Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:54 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:11 WIB

CVE-2024-56533

ALSA: usx2y: Use snd_card_free_when_closed() at disconnection

In the Linux kernel, the following vulnerability has been resolved: ALSA: usx2y: Use snd_card_free_when_closed() at disconnection The USB disconnect callback is supposed to be short and not too-long waiting. OTOH, the current code uses snd_card_free() at disconnection, but this waits for the close of all used fds, h…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:11:16.256Z. Updated 2026-05-11T20:54:04.852Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:54 WIB

Official record

UnscoredPublished 27 Dec 2024, 21:11 WIB

CVE-2024-56532

ALSA: us122l: Use snd_card_free_when_closed() at disconnection

In the Linux kernel, the following vulnerability has been resolved: ALSA: us122l: Use snd_card_free_when_closed() at disconnection The USB disconnect callback is supposed to be short and not too-long waiting. OTOH, the current code uses snd_card_free() at disconnection, but this waits for the close of all used fds, …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:11:15.266Z. Updated 2026-05-11T20:54:03.545Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:54 WIB

Official record

HighPublished 27 Dec 2024, 21:11 WIB

CVE-2024-56531

ALSA: caiaq: Use snd_card_free_when_closed() at disconnection

In the Linux kernel, the following vulnerability has been resolved: ALSA: caiaq: Use snd_card_free_when_closed() at disconnection The USB disconnect callback is supposed to be short and not too-long waiting. OTOH, the current code uses snd_card_free() at disconnection, but this waits for the close of all used fds, h…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T14:11:14.161Z. Updated 2026-08-05T11:44:54.186Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:44 WIB

Official record

HighPublished 27 Dec 2024, 20:50 WIB

CVE-2024-53239

ALSA: 6fire: Release resources at card release

In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Release resources at card release The current 6fire code tries to release the resources right after the call of usb6fire_chip_abort(). But at this moment, the card object might be still in use (as we're calling snd_card_free_when_closed…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T13:50:24.896Z. Updated 2026-08-05T11:44:48.839Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 18:44 WIB

Official record

UnscoredPublished 27 Dec 2024, 20:50 WIB

CVE-2024-53238

Bluetooth: btmtk: adjust the position to init iso data anchor

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btmtk: adjust the position to init iso data anchor MediaTek iso data anchor init should be moved to where MediaTek claims iso data interface. If there is an unexpected BT usb disconnect during setup flow, it will cause a NULL pointer crash…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2024-12-27T13:50:24.113Z. Updated 2026-05-11T20:53:31.668Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 03:53 WIB

Official record