Skip to main content

CVKevelryresearch console

Overview Search (current)Priority4 views Radar Replay Method API

Data status

Source freshnessstatus Referencev1

Display

Display timezone

Search/all sources

⌘K

Data status Explore

SearchRetained snapshotUTC filters

Find the CVE cohort

Identifier and description search over the retained local snapshot. Filters apply to the cohort immediately; every chart links back into the same filter state.

Scoring rules API reference

Filters2 active

Published date range Compares the stored publication timestamp in UTC. The start binds inclusively, the end exclusively. Records with an unknown publication date are excluded as soon as either bound is set; they never match a bounded range.

From · UTC→Before · UTC

Start inclusive, end exclusive. Unknown dates are excluded from any bounded range.

Severity bands, primary CNA metric with version labels Bands come from the primary CNA CVSS only. ADP-only and metric-less records land in Unscored. CVSS v2-only records are Legacy and are never compared with v3/v4 scores.

Critical · 9.0–10.0High · 7.0–8.9Medium · 4.0–6.9Low · 0.1–3.9None · scored 0.0Legacy · v2 onlyUnscored · no CNA metric

Known-exploited membership Membership in the accepted CISA snapshot. Absence is not proof of no exploitation. The date added is the catalog date, not the date of first exploitation.

Any KEV statusKEV-listed onlyNot KEV-listed

Forecast presence, same snapshot, same model Dated forecast presence for this snapshot's model and score date — not severity, not popularity. Absent means no current row, never zero.

Any forecast statusForecast presentForecast unavailable

Results per page Bounded page size. Totals and cohort coverage may exceed the returned page.Clear filters

Matching cohort

Matching cohort: 650 published records · 0 KEV · 650 with a forecast · 0 unknown dates

Ordering & coverage

Search ordering: text queries rank by the local index, then CVE ID. Empty queries sort publication date descending with unknown dates last. Severity bands narrow the cohort after the text, date, and signal match. Excerpts are capped at 320 code points. Coverage is exact over the matching cohort.

Matching cohort composition

Cohort composition

650 matching published records · 0 with an unknown publication date

Every segment and month is a link that preserves the other filters.

Severity

Crit00.00%
High00.00%
Med00.00%
Low00.00%
None00.00%
Legacy00.00%
Unscored650100%

Matching records by UTC month

Jan 26650

Signal coverage

KEV-listed: 0
With a forecast: 650
Unknown date: 0
Unscored severity: 650

Share of cohort: KEV 0.00% · forecast 100% · unscored 100%.

Showing 1–20 of 650By severity band: Critical · 9.0–10.0 0, High · 7.0–8.9 0, Medium · 4.0–6.9 0, Low · 0.1–3.9 0, None · scored 0.0 0, Legacy · v2 only 0, Unscored · no CNA metric 650

UnscoredPublished 31 Jan 2026, 18:42 WIB

CVE-2026-23039

drm/gud: fix NULL fb and crtc dereferences on USB disconnect

In the Linux kernel, the following vulnerability has been resolved: drm/gud: fix NULL fb and crtc dereferences on USB disconnect On disconnect drm_atomic_helper_disable_all() is called which sets both the fb and crtc for a plane to NULL before invoking a commit. This causes a kernel oops on every display disconnect.…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-31T11:42:33.377Z. Updated 2026-05-11T21:58:49.153Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:58 WIB

Official record

UnscoredPublished 31 Jan 2026, 18:42 WIB

CVE-2026-23038

pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node()

In the Linux kernel, the following vulnerability has been resolved: pnfs/flexfiles: Fix memory leak in nfs4_ff_alloc_deviceid_node() In nfs4_ff_alloc_deviceid_node(), if the allocation for ds_versions fails, the function jumps to the out_scratch label without freeing the already allocated dsaddrs list, leading to a m…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Showing 1 to 20 of 650.Next page

Published 2026-01-31T11:42:32.599Z. Updated 2026-10-19T18:25:28.264Z.

CVSS—KEVNot listedEPSSPresentUpdated20 Oct 2026, 01:25 WIB

Official record

UnscoredPublished 31 Jan 2026, 18:42 WIB

CVE-2026-23037

can: etas_es58x: allow partial RX URB allocation to succeed

In the Linux kernel, the following vulnerability has been resolved: can: etas_es58x: allow partial RX URB allocation to succeed When es58x_alloc_rx_urbs() fails to allocate the requested number of URBs but succeeds in allocating some, it returns an error code. This causes es58x_open() to return early, skipping the cl…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-31T11:42:31.689Z. Updated 2026-06-02T13:00:55.620Z.

CVSS—KEVNot listedEPSSPresentUpdated02 Jun 2026, 20:00 WIB

Official record

UnscoredPublished 31 Jan 2026, 18:42 WIB

CVE-2026-23036

btrfs: release path before iget_failed() in btrfs_read_locked_inode()

In the Linux kernel, the following vulnerability has been resolved: btrfs: release path before iget_failed() in btrfs_read_locked_inode() In btrfs_read_locked_inode() if we fail to lookup the inode, we jump to the 'out' label with a path that has a read locked leaf and then we call iget_failed(). This can result in a…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-31T11:42:30.782Z. Updated 2026-05-11T21:58:45.739Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:58 WIB

Official record

UnscoredPublished 31 Jan 2026, 18:42 WIB

CVE-2026-23035

net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv mlx5e_priv is an unstable structure that can be memset(0) if profile attaching fails. Pass netdev to mlx5e_destroy_netdev() to guarantee it will work on a valid netdev. On mlx5e_remove:…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-31T11:42:29.960Z. Updated 2026-10-21T12:38:52.789Z.

CVSS—KEVNot listedEPSSPresentUpdated21 Oct 2026, 19:38 WIB

Official record

UnscoredPublished 31 Jan 2026, 18:42 WIB

CVE-2026-23034

drm/amdgpu/userq: Fix fence reference leak on queue teardown v2

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: Fix fence reference leak on queue teardown v2 The user mode queue keeps a pointer to the most recent fence in userq->last_fence. This pointer holds an extra dma_fence reference. When the queue is destroyed, we free the fence driver…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-31T11:42:29.137Z. Updated 2026-05-11T21:58:43.438Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:58 WIB

Official record

UnscoredPublished 31 Jan 2026, 18:42 WIB

CVE-2026-23033

dmaengine: omap-dma: fix dma_pool resource leak in error paths

In the Linux kernel, the following vulnerability has been resolved: dmaengine: omap-dma: fix dma_pool resource leak in error paths The dma_pool created by dma_pool_create() is not destroyed when dma_async_device_register() or of_dma_controller_register() fails, causing a resource leak in the probe error paths. Add d…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-31T11:42:28.352Z. Updated 2026-06-02T13:00:54.479Z.

CVSS—KEVNot listedEPSSPresentUpdated02 Jun 2026, 20:00 WIB

Official record

UnscoredPublished 31 Jan 2026, 18:42 WIB

CVE-2026-23032

null_blk: fix kmemleak by releasing references to fault configfs items

In the Linux kernel, the following vulnerability has been resolved: null_blk: fix kmemleak by releasing references to fault configfs items When CONFIG_BLK_DEV_NULL_BLK_FAULT_INJECTION is enabled, the null-blk driver sets up fault injection support by creating the timeout_inject, requeue_inject, and init_hctx_fault_in…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-31T11:42:11.640Z. Updated 2026-06-02T13:00:53.339Z.

CVSS—KEVNot listedEPSSPresentUpdated02 Jun 2026, 20:00 WIB

Official record

UnscoredPublished 31 Jan 2026, 18:42 WIB

CVE-2026-23031

can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak

In the Linux kernel, the following vulnerability has been resolved: can: gs_usb: gs_usb_receive_bulk_callback(): fix URB memory leak In gs_can_open(), the URBs for USB-in transfers are allocated, added to the parent->rx_submitted anchor and submitted. In the complete callback gs_usb_receive_bulk_callback(), the URB i…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-31T11:42:09.276Z. Updated 2026-06-02T13:00:52.214Z.

CVSS—KEVNot listedEPSSPresentUpdated02 Jun 2026, 20:00 WIB

Official record

UnscoredPublished 31 Jan 2026, 18:42 WIB

CVE-2026-23030

phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe()

In the Linux kernel, the following vulnerability has been resolved: phy: rockchip: inno-usb2: Fix a double free bug in rockchip_usb2phy_probe() The for_each_available_child_of_node() calls of_node_put() to release child_np in each success loop. After breaking from the loop with the child_np has been released, the cod…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-31T11:42:08.525Z. Updated 2026-06-02T13:00:51.068Z.

CVSS—KEVNot listedEPSSPresentUpdated02 Jun 2026, 20:00 WIB

Official record

UnscoredPublished 31 Jan 2026, 18:42 WIB

CVE-2026-23029

LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy()

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix kvm_device leak in kvm_eiointc_destroy() In kvm_ioctl_create_device(), kvm_device has allocated memory, kvm_device->destroy() seems to be supposed to free its kvm_device struct, but kvm_eiointc_destroy() is not currently doing thi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-31T11:42:07.750Z. Updated 2026-05-11T21:58:37.718Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:58 WIB

Official record

UnscoredPublished 31 Jan 2026, 18:42 WIB

CVE-2026-23028

LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy()

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix kvm_device leak in kvm_ipi_destroy() In kvm_ioctl_create_device(), kvm_device has allocated memory, kvm_device->destroy() seems to be supposed to free its kvm_device struct, but kvm_ipi_destroy() is not currently doing this, that …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-31T11:42:06.984Z. Updated 2026-05-11T21:58:36.566Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:58 WIB

Official record

UnscoredPublished 31 Jan 2026, 18:42 WIB

CVE-2026-23027

LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy()

In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Fix kvm_device leak in kvm_pch_pic_destroy() In kvm_ioctl_create_device(), kvm_device has allocated memory, kvm_device->destroy() seems to be supposed to free its kvm_device struct, but kvm_pch_pic_destroy() is not currently doing thi…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-31T11:42:06.183Z. Updated 2026-05-11T21:58:35.391Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:58 WIB

Official record

UnscoredPublished 31 Jan 2026, 18:42 WIB

CVE-2026-23026

dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config()

In the Linux kernel, the following vulnerability has been resolved: dmaengine: qcom: gpi: Fix memory leak in gpi_peripheral_config() Fix a memory leak in gpi_peripheral_config() where the original memory pointed to by gchan->config could be lost if krealloc() fails. The issue occurs when: 1. gchan->config points to …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-31T11:42:05.185Z. Updated 2026-10-15T01:12:41.525Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:12 WIB

Official record

UnscoredPublished 31 Jan 2026, 18:42 WIB

CVE-2026-23025

mm/page_alloc: prevent pcp corruption with SMP=n

In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: prevent pcp corruption with SMP=n The kernel test robot has reported: BUG: spinlock trylock failure on UP on CPU#0, kcompactd0/28 lock: 0xffff888807e35ef0, .magic: dead4ead, .owner: kcompactd0/28, .owner_cpu: 0 CPU: 0 UID: 0 PID: …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-31T11:42:04.426Z. Updated 2026-06-02T13:00:48.791Z.

CVSS—KEVNot listedEPSSPresentUpdated02 Jun 2026, 20:00 WIB

Official record

UnscoredPublished 31 Jan 2026, 18:42 WIB

CVE-2025-71191

dmaengine: at_hdmac: fix device leak on of_dma_xlate()

In the Linux kernel, the following vulnerability has been resolved: dmaengine: at_hdmac: fix device leak on of_dma_xlate() Make sure to drop the reference taken when looking up the DMA platform device during of_dma_xlate() when releasing channel resources. Note that commit 3832b78b3ec2 ("dmaengine: at_hdmac: add mis…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-31T11:42:03.545Z. Updated 2026-10-15T01:11:11.432Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:11 WIB

Official record

UnscoredPublished 31 Jan 2026, 18:42 WIB

CVE-2025-71190

dmaengine: bcm-sba-raid: fix device leak on probe

In the Linux kernel, the following vulnerability has been resolved: dmaengine: bcm-sba-raid: fix device leak on probe Make sure to drop the reference taken when looking up the mailbox device during probe on probe failures and on driver unbind.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-31T11:42:01.092Z. Updated 2026-10-19T18:15:16.829Z.

CVSS—KEVNot listedEPSSPresentUpdated20 Oct 2026, 01:15 WIB

Official record

UnscoredPublished 31 Jan 2026, 18:42 WIB

CVE-2025-71189

dmaengine: dw: dmamux: fix OF node leak on route allocation failure

In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw: dmamux: fix OF node leak on route allocation failure Make sure to drop the reference taken to the DMA master OF node also on late route allocation failures.

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-31T11:42:00.345Z. Updated 2026-10-15T01:11:08.066Z.

CVSS—KEVNot listedEPSSPresentUpdated15 Oct 2026, 08:11 WIB

Official record

UnscoredPublished 31 Jan 2026, 18:41 WIB

CVE-2025-71188

dmaengine: lpc18xx-dmamux: fix device leak on route allocation

In the Linux kernel, the following vulnerability has been resolved: dmaengine: lpc18xx-dmamux: fix device leak on route allocation Make sure to drop the reference taken when looking up the DMA mux platform device during route allocation. Note that holding a reference to a device does not prevent its driver data from…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-31T11:41:59.624Z. Updated 2026-06-02T13:00:36.620Z.

CVSS—KEVNot listedEPSSPresentUpdated02 Jun 2026, 20:00 WIB

Official record

UnscoredPublished 31 Jan 2026, 18:41 WIB

CVE-2025-71187

dmaengine: sh: rz-dmac: fix device leak on probe failure

In the Linux kernel, the following vulnerability has been resolved: dmaengine: sh: rz-dmac: fix device leak on probe failure Make sure to drop the reference taken when looking up the ICU device during probe also on probe failures (e.g. probe deferral).

Excerpt language: en.

Unscored under this view's policy Not listed in this KEV snapshot. Forecast present in this snapshot.

Published 2026-01-31T11:41:58.816Z. Updated 2026-05-11T21:56:20.913Z.

CVSS—KEVNot listedEPSSPresentUpdated12 May 2026, 04:56 WIB

Official record