Summary
generated automatically from NVD dataCVE-2022-0995 is an out-of-bounds memory write (CWE-787) in the watch_queue event notification subsystem of the Linux kernel. It can overwrite parts of kernel state, letting a local user gain privileged access or cause a denial of service. The flaw is listed in the CISA KEV catalog as exploited and carries a CVSS v3.1 score of 7.8 (HIGH). Fedora 35 and several NetApp H-series firmware products are also listed as affected.
NVD description
An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.
⚠️ Actively exploited — CISA KEV
This CVE was added to CISA's Known Exploited Vulnerabilities catalog on 2026-08-26. It is confirmed exploited in the wild and must be patched as a priority.
Remediation deadline (US federal agencies): 2026-08-29
EPSS · FIRST.org
8.9%probability of exploitation in the next 30 days
Higher than 95% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-18, recomputed daily by FIRST.org.
CVSS v3.1 Score
Information
- Published
- 25 mars 2022
- Updated
- 27 août 2026
- Status
- Analyzed
- Source
- secalert@redhat.com
Affected products
Weaknesses (CWE)
References (11)
- http://packetstormsecurity.com/files/166770/Linux-watch_queue-Filter-Out-Of-Bounds-Write.htmlExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/166815/Watch-Queue-Out-Of-Bounds-Write.htmlExploitThird Party AdvisoryVDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=2063786Issue TrackingPatchThird Party Advisory
- https://security.netapp.com/advisory/ntap-20220429-0001/Third Party Advisory
- http://packetstormsecurity.com/files/166770/Linux-watch_queue-Filter-Out-Of-Bounds-Write.htmlExploitThird Party AdvisoryVDB Entry
- http://packetstormsecurity.com/files/166815/Watch-Queue-Out-Of-Bounds-Write.htmlExploitThird Party AdvisoryVDB Entry
- https://bugzilla.redhat.com/show_bug.cgi?id=2063786Issue TrackingPatchThird Party Advisory
- https://security.netapp.com/advisory/ntap-20220429-0001/Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-0995US Government Resource
Similar CVEs
Other vulnerabilities of type CWE-787
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.