HIGH

CVE-2022-0995

CVSS v3

7.8

HIGH

EPSS Score

20.5%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.

Technical details

Published
3/25/2022

Frequently asked questions

What is CVE-2022-0995?

An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.

Is CVE-2022-0995 actively exploited?

Active exploitation of CVE-2022-0995 has not been confirmed. The EPSS score is 20.5%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2022-0995?

CVE-2022-0995 has a CVSS v3 base score of 7.8 (HIGH severity).

Is CVE-2022-0995 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.