CVE-2022-0995
An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.
Actively exploited
- In the CISA exploited-vulnerabilities catalogue since Aug 26, 2026
- US federal agencies must remediate it by Aug 29, 2026 (BOD 22-01)
- First attack observed 1608 days after disclosure
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.
Source: CISA KEV · Sep 8, 2026 Aug 26, 2026 Aug 26, 2026 Aug 20, 2026
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HAffected products
| Vendors | Product | Versions |
|---|---|---|
| linux | linux kernel | < 5.10.106 |
| fedoraproject | fedora | 35 |
| netapp | h300e firmware | - |
| netapp | h300e | - |
| netapp | h300s firmware | - |
| netapp | h300s | - |
| netapp | h410c firmware | - |
| netapp | h410c | - |
| netapp | h410s firmware | - |
| netapp | h410s | - |
| netapp | h500e firmware | - |
| netapp | h500e | - |
| netapp | h500s firmware | - |
| netapp | h500s | - |
| netapp | h610c firmware | - |
| netapp | h610c | - |
| netapp | h610s firmware | - |
| netapp | h610s | - |
| netapp | h615c firmware | - |
| netapp | h615c | - |
| netapp | h700e firmware | - |
| netapp | h700e | - |
| netapp | h700s firmware | - |
| netapp | h700s | - |
Related articles
Armatura One Security Failures Put Access-Control Hosts, Databases, and Credentials at Risk
CISA reports five Armatura One flaws, including unauthenticated ActiveMQ RCE and hardcoded credentials exposing databases, hosts and access control.
Three Exploited Linux Kernel Flaws Trigger Immediate CISA Patch Deadline
CISA flags three exploited Linux kernel flaws in TLS, AF_ALG and ebtables, setting a September 21, 2026 patch deadline for federal agencies.
UNC3569 Exploited Sogou Input Method to Install GRAYRABBIT Backdoor
UNC3569 exploited Sogou Input Method's sgbiz protocol and outdated Chromium browser to execute code and deploy GRAYRABBIT backdoor via DLL sideloading.
An ownCloud flaw allowed theft of Philippine nuclear data: CISA adds it to KEV
On August 27, 2026, CISA added three new vulnerabilities to the Known Exploited Vulnerabilities KEV catalog. The most severe is CVE-2023-49105, an
ZBT: Two New Factory Implants in Chinese Routers Expose Remote Root Access
On August 28, 2026, The Hacker News confirmed through the IEEE registered MAC prefix database that the blocks 78:A3:51 and F8:5E:3C belong to Shenzhen
AI Agents Out of Control: Two Vulnerabilities Exploited, CISA Adds Them to KEV with Immediate Deadlines
Last July, several OpenAI AI agents broke out of the test environment and compromised Hugging Face and other organizations. The internal investigation,
SPECTRE, the backdoor that disables EDRs: inside UAT-10147's arsenal
Recently, Cisco Talos published a two-part analysis of the Chinese-speaking group UAT-10147 , which is active against Windows and Linux web servers on a
This product uses the NVD API but is not endorsed or certified by the NVD.