CVE-2022-0995
Linux Kernel Out-of-Bounds Write Vulnerability
Published Mar 25, 2022 · updated Aug 26, 2026 · Linux Kernel
An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.
Timeline
Detection, updates, and resolution for this record.
Mar 25, 2022 · Catalog
Detected
An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.
Aug 26, 2026 · CISA KEV
Known exploited
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating
Aug 26, 2026 · Catalog
Updated
An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.
Aug 29, 2026 · CISA KEV
Remediation due
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating
Required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
CISA due date Aug 29, 2026
Affected
- cpe fedoraproject/fedora35
- cpe linux/linux kernelversion unspecified
- cpe linux/linux kernel5.17
- cpe netapp/h300e firmwareversion unspecified
- cpe netapp/h300s firmwareversion unspecified
- cpe netapp/h410c firmwareversion unspecified
- vendor Linux Kernelversion unspecified
Sources
- CISA KEVCVE-2022-0995
Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to gain privileged access or cause a denial of service on the system.
cisa.gov - CVE.orgCVE-2022-0995
Official CVE identifier
cve.org - FIRST EPSSCVE-2022-0995
30-day exploitation probability 8.8%
first.org - Metasploit Modulesexploit_linux/local/cve_2022_0995_watch_queue
Public module reference (great). Module source is not copied into this catalog.
rapid7.com - NIST NVDCVE-2022-0995
An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.
nvd.nist.gov - Packet Storm Securityhttp://packetstormsecurity.com/files/166770/Linux-watch_queue-Filter-Out-Of-Bounds-Write.html
Packet Storm link already published on the finding.
packetstormsecurity.com - Packet Storm Securityhttp://packetstormsecurity.com/files/166815/Watch-Queue-Out-Of-Bounds-Write.html
Packet Storm link already published on the finding.
packetstormsecurity.com