Secuno
ENNL
Book demo

CVE-2022-0995

Linux Kernel Out-of-Bounds Write

7.8 HIGHActively exploited (CISA KEV)Public exploitEPSS 8.79%
  1. Published25 Mar 2022
  2. Added to CISA KEV26 Aug 2026
  3. Remediation due29 Aug 2026
Actively exploited (CISA KEV)

Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to gain privileged access or cause a denial of service on the system.

Added to KEV: 26 Aug 2026Federal remediation due: 29 Aug 2026

Description

An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.

CVSS 3.1 breakdown

Attack vectorLocal
Attack complexityLow
Privileges requiredLow
User interactionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Fedoraproject Fedora35
Linux Kernel≥ 5.11 < 5.15.29 · ≥ 5.16 < 5.16.5 · ≥ 5.8 < 5.10.106 · 5.17
Netapp H300e Firmwareall versions
Netapp H300s Firmwareall versions
Netapp H410c Firmwareall versions
Netapp H410s Firmwareall versions
Netapp H500e Firmwareall versions
Netapp H500s Firmwareall versions
Netapp H610c Firmwareall versions
Netapp H610s Firmwareall versions
Netapp H615c Firmwareall versions
Netapp H700e Firmwareall versions
Netapp H700s Firmwareall versions

Remediation

Fixed in
Linux Kernel≥ 5.15.29

References

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

CVE-2026-1078158.5
MariaDB server is a community developed fork of MySQL server. From 10.6.1 until…
CVE-2026-195708.8
The LE Audio Broadcast Sink in subsys/bluetooth/audio/bap_broadcast_sink.c copies…
CVE-2026-1079099.1
A heap-based out-of-bounds write in the ws_read_frame function (src/bolt/ws.c) and the…
CVE-2026-1079089.8
A heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/bolt_api.c)…
CVE-2026-823448.1
IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow…
CVE-2026-823358.1
IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer…

Frequently asked

Is CVE-2022-0995 being actively exploited?

Yes. CVE-2022-0995 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added 26 Aug 2026.

How severe is CVE-2022-0995?

CVE-2022-0995 has a CVSS 3.1 base score of 7.8, rated high. EPSS estimates a 8.79% probability of exploitation.

Which products are affected by CVE-2022-0995?

Affected products include Fedoraproject Fedora, Linux Kernel, Netapp H300e Firmware, Netapp H300s Firmware, Netapp H410c Firmware, and 8 more.

How do I fix CVE-2022-0995?

Upgrade affected software to a fixed version, for example Linux Kernel 5.15.29 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2022-0995 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. Because it is on the CISA KEV list, Secuno flags any affected asset as top-priority automatically. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Get Patch this first every Monday

Five vulnerabilities that matter this week, ranked on real exploitation. Plain language, one email, no spam.

You can unsubscribe with one click from every issue. We handle your details as described in our privacy policy.

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.