CVE-2022-0995

HIGH7.8Published on March 25, 2022

An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.

Early warning: exploitation observed

  • Exploitation observed since Aug 20, 2026
  • Not yet in the official CISA catalogue
  • First attack observed 1608 days after disclosure

Source: VulnCheck KEV · Aug 20, 2026

CVSS score7.8 / 10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness type (CWE)CWE-787, CWE-787
Vendorsnetapp, linux, fedoraproject

Affected products

VendorsProdottoVersioni
linuxlinux kernel< 5.10.106
fedoraprojectfedora35
netapph300e firmware-
netapph300e-
netapph300s firmware-
netapph300s-
netapph410c firmware-
netapph410c-
netapph410s firmware-
netapph410s-
netapph500e firmware-
netapph500e-
netapph500s firmware-
netapph500s-
netapph610c firmware-
netapph610c-
netapph610s firmware-
netapph610s-
netapph615c firmware-
netapph615c-
netapph700e firmware-
netapph700e-
netapph700s firmware-
netapph700s-

Related articles

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database