CVE-2022-0995: Linux Kernel Out-of-Bounds Write Vulnerability
Vulnerability summary
CVE-2022-0995 is a high (CVSS 7.8) Out-of-bounds Write vulnerability in Linux Kernel. It is known to be exploited: CISA lists it, first on 26-08-2026. EPSS estimates a 8.86% chance of exploitation in the next 30 days, higher than 95.2% of scored vulnerabilities. 3 public exploits are recorded.
Listed as exploited by CISA (26-08-2026)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 17 · Related 13Timeline
- 25-03-2022PublishedVulnerability first disclosed.
- 26-08-2026Added to CISA KEVExploitedLinux Kernel Out-of-Bounds Write Vulnerability
- 27-08-2026Last modifiedVulnerability information updated.
- 29-08-2026CISA remediation dueDeadline passedApply mitigations per vendor instructions.
Description
An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.
CVSS metrics
5 scores · 4 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
8.86%
Chance of exploitation in the next 30 days
Percentile
95%
Versus all other CVEs
30-day change
Increase +0.07 pp
From 8.79% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVListed- Added
- 26-08-2026
- Federal due date
- 29-08-2026
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
CISA required action
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines. nvd.nist.gov/vuln/detail/CVE-2022-0995
Public exploits
3 foundExploit Reference (packetstormsecurity.com)
Maturity: unknown
Exploit Reference (packetstormsecurity.com)
Maturity: unknown
Watch Queue Out of Bounds Write
exploit/linux/local/cve_2022_0995_watch_queue
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu95 products
- linuxAll versions (No fix recorded) | < 5.15.0-138.148
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.15.0-1082.89
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Debian1 product
- linux< 5.16.18-1
Fedoraproject1 product
- fedoraEOL35
Linux1 product
- linux_kernel≥ 5.8, < 5.10.106 | ≥ 5.11, < 5.15.29 | ≥ 5.16, < 5.16.5 | 5.17:rc1 | 5.17:rc2 | 5.17:rc3 | 5.17:rc4 | 5.17:rc5 | 5.17:rc6 | 5.17:rc7
5 vendors · 109 products
References
20 links- packetstormsecurity.com/files/166770/Linux-watch_queue-Filter-Out-Of-Bounds-Write.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry
- packetstormsecurity.com/files/166815/Watch-Queue-Out-Of-Bounds-Write.htmlX Refsource MISCExploitThird Party AdvisoryVDB Entry
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-0995Government ResourceUS Government Resource
