Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters1 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 5,493 published records · 23 KEV · 5,493 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

5,493 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit3175.8%
High1,53028%
Med2,03937%
Low1262.3%
None10.02%
Legacy00.00%
Unscored1,48027%

Matching records by UTC month

Dec 255,493

Signal coverage

KEV-listed: 23
With a forecast: 5,493
Unknown date: 0
Unscored severity: 1,480

Share of cohort: KEV 0.42% · forecast 100% · unscored 27%.

Showing 521–540 of 5,493By severity band: Critical · 9.0–10.0 317, High · 7.0–8.9 1,530, Medium · 4.0–6.9 2,039, Low · 0.1–3.9 126, None · scored 0.0 1, Legacy · v2 only 0, Unscored · no CNA metric 1,480

UnscoredPublished 30 Dec 2025, 19:08 WIB

CVE-2022-50823

clk: tegra: Fix refcount leak in tegra114_clock_init

In the Linux kernel, the following vulnerability has been resolved: clk: tegra: Fix refcount leak in tegra114_clock_init of_find_matching_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:08:36.911Z. Updated 2026-05-11T19:25:48.476Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:25 WIB

Official record

HighPublished 30 Dec 2025, 19:08 WIB

CVE-2022-50822

RDMA/restrack: Release MR restrack when delete

In the Linux kernel, the following vulnerability has been resolved: RDMA/restrack: Release MR restrack when delete The MR restrack also needs to be released when delete it, otherwise it cause memory leak as the task struct won't be released.

Excerpt language: en.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:08:36.228Z. Updated 2026-10-15T21:41:24.165Z.

Showing 521 to 540 of 5493.First page Next page

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated16 Oct 2026, 04:41 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:08 WIB

CVE-2022-50821

SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Don't leak netobj memory when gss_read_proxy_verf() fails

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:08:35.564Z. Updated 2026-05-11T19:25:46.202Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:25 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:08 WIB

CVE-2022-50820

perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init()

In the Linux kernel, the following vulnerability has been resolved: perf/arm_dmc620: Fix hotplug callback leak in dmc620_pmu_init() dmc620_pmu_init() won't remove the callback added by cpuhp_setup_state_multi() when platform_driver_register() failed. Remove the callback by cpuhp_remove_multi_state() in fail path. Si…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:08:34.894Z. Updated 2026-05-11T19:25:45.031Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:25 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:08 WIB

CVE-2022-50819

udmabuf: Set ubuf->sg = NULL if the creation of sg table fails

In the Linux kernel, the following vulnerability has been resolved: udmabuf: Set ubuf->sg = NULL if the creation of sg table fails When userspace tries to map the dmabuf and if for some reason (e.g. OOM) the creation of the sg table fails, ubuf->sg needs to be set to NULL. Otherwise, when the userspace subsequently c…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:08:34.225Z. Updated 2026-05-11T19:25:43.872Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:25 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:08 WIB

CVE-2022-50818

scsi: pm8001: Fix running_req for internal abort commands

In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix running_req for internal abort commands Disabling the remote phy for a SATA disk causes a hang: root@(none)$ more /sys/class/sas_phy/phy-0:0:8/target_port_protocols sata root@(none)$ echo 0 > sys/class/sas_phy/phy-0:0:8/enable root…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:08:33.548Z. Updated 2026-05-11T19:25:42.709Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:25 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:08 WIB

CVE-2022-50817

net: hsr: avoid possible NULL deref in skb_clone()

In the Linux kernel, the following vulnerability has been resolved: net: hsr: avoid possible NULL deref in skb_clone() syzbot got a crash [1] in skb_clone(), caused by a bug in hsr_get_untagged_frame(). When/if create_stripped_skb_hsr() returns NULL, we must not attempt to call skb_clone(). While we are at it, repl…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:08:32.866Z. Updated 2026-05-11T19:25:41.586Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:25 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:08 WIB

CVE-2022-50816

ipv6: ensure sane device mtu in tunnels

In the Linux kernel, the following vulnerability has been resolved: ipv6: ensure sane device mtu in tunnels Another syzbot report [1] with no reproducer hints at a bug in ip6_gre tunnel (dev:ip6gretap0) Since ipv6 mcast code makes sure to read dev->mtu once and applies a sanity check on it (see commit b9b312a7a451 "…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:08:32.215Z. Updated 2026-05-11T19:25:40.382Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:25 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:08 WIB

CVE-2022-50815

ext2: Add sanity checks for group and filesystem size

In the Linux kernel, the following vulnerability has been resolved: ext2: Add sanity checks for group and filesystem size Add sanity check that filesystem size does not exceed the underlying device size and that group size is big enough so that metadata can fit into it. This avoid trying to mount some crafted filesys…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:08:31.554Z. Updated 2026-05-11T19:25:39.257Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:25 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:08 WIB

CVE-2022-50814

crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr

In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr KASAN reported this Bug: [17619.659757] BUG: KASAN: global-out-of-bounds in param_get_int+0x34/0x60 [17619.673193] Read of size 4 at addr fffff01332d7ed00 by task read_all/1507958 ... [1…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:08:30.862Z. Updated 2026-05-11T19:25:38.090Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:25 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:08 WIB

CVE-2022-50813

drivers: mcb: fix resource leak in mcb_probe()

In the Linux kernel, the following vulnerability has been resolved: drivers: mcb: fix resource leak in mcb_probe() When probe hook function failed in mcb_probe(), it doesn't put the device. Compiled test only.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:08:30.164Z. Updated 2026-05-11T19:25:36.947Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:25 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:08 WIB

CVE-2022-50812

security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6

In the Linux kernel, the following vulnerability has been resolved: security: Restrict CONFIG_ZERO_CALL_USED_REGS to gcc or clang > 15.0.6 A bad bug in clang's implementation of -fzero-call-used-regs can result in NULL pointer dereferences (see the links above the check for more information). Restrict CONFIG_CC_HAS_Z…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:08:29.434Z. Updated 2026-05-11T19:25:35.722Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:25 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:08 WIB

CVE-2022-50811

erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails

In the Linux kernel, the following vulnerability has been resolved: erofs: fix missing unmap if z_erofs_get_extent_compressedlen() fails Otherwise, meta buffers could be leaked.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:08:28.719Z. Updated 2026-05-11T19:25:34.584Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:25 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:08 WIB

CVE-2022-50810

rapidio: devices: fix missing put_device in mport_cdev_open

In the Linux kernel, the following vulnerability has been resolved: rapidio: devices: fix missing put_device in mport_cdev_open When kfifo_alloc fails, the refcount of chdev->dev is left incremental. We should use put_device(&chdev->dev) to decrease the ref count of chdev->dev to avoid refcount leak.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:08:27.924Z. Updated 2026-05-11T19:25:33.405Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:25 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:08 WIB

CVE-2022-50809

xhci: dbc: Fix memory leak in xhci_alloc_dbc()

In the Linux kernel, the following vulnerability has been resolved: xhci: dbc: Fix memory leak in xhci_alloc_dbc() If DbC is already in use, then the allocated memory for the xhci_dbc struct doesn't get freed before returning NULL, which leads to a memleak.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:08:27.242Z. Updated 2026-05-23T15:25:16.272Z.

CVSS—KEVNot listedEPSSPresentUpdated23 May 2026, 22:25 WIB

Official record

HighPublished 30 Dec 2025, 19:03 WIB

CVE-2023-54162

ksmbd: fix possible memory leak in smb2_lock()

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix possible memory leak in smb2_lock() argv needs to be free when setup_async_work fails or when the current process is woken up.

Excerpt language: en.

Severity high: primary CNA CVSS 8.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:03:23.583Z. Updated 2026-08-05T09:17:44.673Z.

CVSS8.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 16:17 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:03 WIB

CVE-2022-50786

media: s5p-mfc: Clear workbit to handle error condition

In the Linux kernel, the following vulnerability has been resolved: media: s5p-mfc: Clear workbit to handle error condition During error on CLOSE_INSTANCE command, ctx_work_bits was not getting cleared. During consequent mfc execution NULL pointer dereferencing of this context led to kernel panic. This patch fixes th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:03:22.909Z. Updated 2026-05-11T19:25:31.010Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:25 WIB

Official record

HighPublished 30 Dec 2025, 19:03 WIB

CVE-2022-50785

fsi: occ: Prevent use after free

In the Linux kernel, the following vulnerability has been resolved: fsi: occ: Prevent use after free Use get_device and put_device in the open and close functions to make sure the device doesn't get freed while a file descriptor is open. Also, lock around the freeing of the device buffer and check the buffer before u…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity high: primary CNA CVSS 7.8 v3.1 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:03:22.224Z. Updated 2026-08-05T08:59:46.661Z.

CVSS7.8v3.1KEVNot listedEPSSPresentUpdated05 Aug 2026, 15:59 WIB

Official record

UnscoredPublished 30 Dec 2025, 19:03 WIB

CVE-2022-50784

wifi: iwlwifi: mei: fix potential NULL-ptr deref after clone

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mei: fix potential NULL-ptr deref after clone If cloning the SKB fails, don't try to use it, but rather return as if we should pass it. Coverity CID: 1503456

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:03:21.544Z. Updated 2026-05-11T19:25:28.745Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 02:25 WIB

Official record

MedPublished 30 Dec 2025, 19:02 WIB

CVE-2025-15247

gmg137 snap7-rs client.rs download heap-based overflow

A vulnerability was identified in gmg137 snap7-rs up to 153d3e8c16decd7271e2a5b2e3da4d6f68589424. Affected by this issue is the function snap7_rs::client::S7Client::download of the file client.rs. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The exploit is publicly availab…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Severity medium: primary CNA CVSS 6.9 v4.0 (worst CNA-provided scenario) Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2025-12-30T12:02:09.529Z. Updated 2026-02-24T06:16:51.503Z.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated24 Feb 2026, 13:16 WIB

Official record