CVE-2022-0995
Description
An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.
How to fix
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
CISA due date: Aug 29, 2026- linux linux_kernel5.10.106, 5.15.29, 5.16.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 5.8 ≤ v < 5.10.106, 5.11 ≤ v < 5.15.29, 5.16 ≤ v < 5.16.5, 5.17 | 5.10.106, 5.15.29, 5.16.5 |
| fedoraproject fedora | 35 | — |
| netapp h300e_firmware | No range specified | — |
| netapp h300s_firmware | No range specified | — |
| netapp h410c_firmware | No range specified | — |
| netapp h410s_firmware | No range specified | — |
| netapp h500e_firmware | No range specified | — |
| netapp h500s_firmware | No range specified | — |
| netapp h610c_firmware | No range specified | — |
| netapp h610s_firmware | No range specified | — |
| netapp h615c_firmware | No range specified | — |
| netapp h700e_firmware | No range specified | — |
| netapp h700s_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.