Description
An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.
Exploits (5)
metasploit
WORKING POC
GREAT
by Jann Horn, bonfee, bwatters-r7 · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb
References (5)
Scores
CVSS v3
7.8
EPSS
0.1444
EPSS Percentile
94.5%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-787
Status
published
Products (14)
fedoraproject/fedora
35
linux/linux_kernel
5.17 rc1 (7 CPE variants)
linux/linux_kernel
5.8 - 5.10.106
netapp/h300e_firmware
netapp/h300s_firmware
netapp/h410c_firmware
netapp/h410s_firmware
netapp/h500e_firmware
netapp/h500s_firmware
netapp/h610c_firmware
... and 4 more
Published
Mar 25, 2022
Tracked Since
Feb 18, 2026