CVE-2022-0995: Linux Kernel Out-of-Bounds Write Vulnerability

High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2026-08-26. EPSS: 8.8% chance of exploitation in the next 30 days.

An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.

Affected products

• Fedoraproject Fedora: version 35 only
• Linux Linux Kernel: from 5.8, before 5.10.106 (fixed in 5.10.106); from 5.11, before 5.15.29 (fixed in 5.15.29); from 5.16, before 5.16.5 (fixed in 5.16.5); version 5.17 only
• Netapp h300e Firmware: affected versions not specified
• Netapp h300s Firmware: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500e Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h610c Firmware: affected versions not specified
• Netapp h610s Firmware: affected versions not specified
• Netapp h615c Firmware: affected versions not specified
• Netapp h700e Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified

Published 2022-03-25. Last modified 2026-08-27.