Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 3,673 published records · 15 KEV · 3,673 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

3,673 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit1654.5%
High96026%
Med1,12231%
Low1203.3%
None10.03%
Legacy00.00%
Unscored1,30536%

Matching records by UTC month

Feb 253,673

Signal coverage

KEV-listed: 15
With a forecast: 3,673
Unknown date: 0
Unscored severity: 1,305

Share of cohort: KEV 0.41% · forecast 100% · unscored 36%.

Showing 421–440 of 3,673By severity band: Critical · 9.0–10.0 165, High · 7.0–8.9 960, Medium · 4.0–6.9 1,122, Low · 0.1–3.9 120, None · scored 0.0 1, Legacy · v2 only 0, Unscored · no CNA metric 1,305

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49714

irqchip/realtek-rtl: Fix refcount leak in map_interrupts

In the Linux kernel, the following vulnerability has been resolved: irqchip/realtek-rtl: Fix refcount leak in map_interrupts of_find_node_by_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. This function doesn't call of_node_put() in error path. Call…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:30.224Z. Updated 2026-05-11T19:05:25.825Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:05 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49713

usb: dwc2: Fix memory leak in dwc2_hcd_init

In the Linux kernel, the following vulnerability has been resolved: usb: dwc2: Fix memory leak in dwc2_hcd_init usb_create_hcd will alloc memory for hcd, and we should call usb_put_hcd to free it when platform_get_resource() fails to prevent memory leak. goto error2 label instead error1 to fix this.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 421 to 440 of 3673.First page Next page

Published 2025-02-26T02:24:29.566Z. Updated 2026-05-23T15:22:48.094Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:22 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49712

usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: lpc32xx_udc: Fix refcount leak in lpc32xx_udc_probe of_parse_phandle() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak. of_node_p…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:28.888Z. Updated 2026-05-11T19:05:23.514Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:05 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49711

bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove()

In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc-bus: fix KASAN use-after-free in fsl_mc_bus_remove() In fsl_mc_bus_remove(), mc->root_mc_bus_dev->mc_io is passed to fsl_destroy_mc_io(). However, mc->root_mc_bus_dev is already freed in fsl_mc_device_remove(). Then reference to mc->root_…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:28.224Z. Updated 2026-05-11T19:05:19.155Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:05 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49710

dm mirror log: round up region bitmap size to BITS_PER_LONG

In the Linux kernel, the following vulnerability has been resolved: dm mirror log: round up region bitmap size to BITS_PER_LONG The code in dm-log rounds up bitset_size to 32 bits. It then uses find_next_zero_bit_le on the allocated region. find_next_zero_bit_le accesses the bitmap using unsigned long pointers. So, o…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:27.532Z. Updated 2026-05-11T19:05:14.868Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:05 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49709

cfi: Fix __cfi_slowpath_diag RCU usage with cpuidle

In the Linux kernel, the following vulnerability has been resolved: cfi: Fix __cfi_slowpath_diag RCU usage with cpuidle RCU_NONIDLE usage during __cfi_slowpath_diag can result in an invalid RCU state in the cpuidle code path: WARNING: CPU: 1 PID: 0 at kernel/rcu/tree.c:613 rcu_eqs_enter+0xe4/0x138 ... Call tra…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:26.817Z. Updated 2026-05-11T19:05:13.734Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:05 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49708

ext4: fix bug_on ext4_mb_use_inode_pa

In the Linux kernel, the following vulnerability has been resolved: ext4: fix bug_on ext4_mb_use_inode_pa Hulk Robot reported a BUG_ON: ================================================================== kernel BUG at fs/ext4/mballoc.c:3211! [...] RIP: 0010:ext4_mb_mark_diskspace_used.cold+0x85/0x136f [...] Call Trace…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:26.142Z. Updated 2026-05-23T15:22:46.811Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:22 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49707

ext4: add reserved GDT blocks check

In the Linux kernel, the following vulnerability has been resolved: ext4: add reserved GDT blocks check We capture a NULL pointer issue when resizing a corrupt ext4 image which is freshly clear resize_inode feature (not run e2fsck). It could be simply reproduced by following steps. The problem is because of the resiz…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:25.441Z. Updated 2026-05-11T19:05:11.366Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:05 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49706

zonefs: fix zonefs_iomap_begin() for reads

In the Linux kernel, the following vulnerability has been resolved: zonefs: fix zonefs_iomap_begin() for reads If a readahead is issued to a sequential zone file with an offset exactly equal to the current file size, the iomap type is set to IOMAP_UNWRITTEN, which will prevent an IO, but the iomap length is calculate…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:24.760Z. Updated 2026-05-11T19:05:10.240Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:05 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49705

9p: fix fid refcount leak in v9fs_vfs_atomic_open_dotl

In the Linux kernel, the following vulnerability has been resolved: 9p: fix fid refcount leak in v9fs_vfs_atomic_open_dotl We need to release directory fid if we fail halfway through open This fixes fid leaking with xfstests generic 531

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:24.077Z. Updated 2026-05-11T19:05:09.096Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:05 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49704

9p: fix fid refcount leak in v9fs_vfs_get_link

In the Linux kernel, the following vulnerability has been resolved: 9p: fix fid refcount leak in v9fs_vfs_get_link we check for protocol version later than required, after a fid has been obtained. Just move the version check earlier.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:23.384Z. Updated 2026-05-11T19:05:07.946Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:05 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49703

scsi: ibmvfc: Store vhost pointer during subcrq allocation

In the Linux kernel, the following vulnerability has been resolved: scsi: ibmvfc: Store vhost pointer during subcrq allocation Currently the back pointer from a queue to the vhost adapter isn't set until after subcrq interrupt registration. The value is available when a queue is first allocated and can/should be also…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:22.700Z. Updated 2026-05-11T19:05:06.751Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:05 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49702

btrfs: fix hang during unmount when block group reclaim task is running

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix hang during unmount when block group reclaim task is running When we start an unmount, at close_ctree(), if we have the reclaim task running and in the middle of a data block group relocation, we can trigger a deadlock when stopping an asy…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:22.030Z. Updated 2026-05-11T19:05:05.519Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:05 WIB

Official record

HighPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49701

scsi: ibmvfc: Allocate/free queue resource only during probe/remove

In the Linux kernel, the following vulnerability has been resolved: scsi: ibmvfc: Allocate/free queue resource only during probe/remove Currently, the sub-queues and event pool resources are allocated/freed for every CRQ connection event such as reset and LPM. This exposes the driver to a couple issues. First the ine…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:21.358Z. Updated 2026-08-05T08:56:05.804Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 15:56 WIB

Official record

HighPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49700

mm/slub: add missing TID updates on slab deactivation

In the Linux kernel, the following vulnerability has been resolved: mm/slub: add missing TID updates on slab deactivation The fastpath in slab_alloc_node() assumes that c->slab is stable as long as the TID stays the same. However, two places in __slab_alloc() currently don't update the TID when deactivating the CPU s…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:20.878Z. Updated 2026-08-05T08:56:04.704Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 15:56 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49699

filemap: Handle sibling entries in filemap_get_read_batch()

In the Linux kernel, the following vulnerability has been resolved: filemap: Handle sibling entries in filemap_get_read_batch() If a read races with an invalidation followed by another read, it is possible for a folio to be replaced with a higher-order folio. If that happens, we'll see a sibling entry for the new fo…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:20.198Z. Updated 2026-05-11T19:05:00.813Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:05 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49698

netfilter: use get_random_u32 instead of prandom

In the Linux kernel, the following vulnerability has been resolved: netfilter: use get_random_u32 instead of prandom bh might occur while updating per-cpu rnd_state from user context, ie. local_out path. BUG: using smp_processor_id() in preemptible [00000000] code: nginx/2725 caller is nft_ng_random_eval+0x24/0x54 […

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:19.519Z. Updated 2026-05-11T19:04:59.536Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

UnscoredPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49697

bpf: Fix request_sock leak in sk lookup helpers

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix request_sock leak in sk lookup helpers A customer reported a request_socket leak in a Calico cloud environment. We found that a BPF program was doing a socket lookup with takes a refcnt on the socket and that it was finding the request_socke…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:18.842Z. Updated 2026-05-11T19:04:58.285Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:04 WIB

Official record

HighPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49696

tipc: fix use-after-free Read in tipc_named_reinit

In the Linux kernel, the following vulnerability has been resolved: tipc: fix use-after-free Read in tipc_named_reinit syzbot found the following issue on: ================================================================== BUG: KASAN: use-after-free in tipc_named_reinit+0x94f/0x9b0 net/tipc/name_distr.c:413 Read of s…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:18.198Z. Updated 2026-08-05T08:56:03.629Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 15:56 WIB

Official record

HighPublished 26 Feb 2025, 09:24 WIB

CVE-2022-49695

igb: fix a use-after-free issue in igb_clean_tx_ring

In the Linux kernel, the following vulnerability has been resolved: igb: fix a use-after-free issue in igb_clean_tx_ring Fix the following use-after-free bug in igb_clean_tx_ring routine when the NIC is running in XDP mode. The issue can be triggered redirecting traffic into the igb NIC and then closing the device wh…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-02-26T02:24:17.545Z. Updated 2026-08-05T08:56:02.567Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 15:56 WIB

Official record