CVE-2022-0995

HIGH

Watch Queue Out of Bounds Write

Title source: metasploit
STIX 2.1

Description

An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.

Exploits (5)

nomisec WORKING POC 500 stars
by Bonfee · poc
https://github.com/Bonfee/CVE-2022-0995
nomisec WORKING POC 1 stars
by 1nzag · poc
https://github.com/1nzag/CVE-2022-0995
nomisec WORKING POC 1 stars
by AndreevSemen · poc
https://github.com/AndreevSemen/CVE-2022-0995
nomisec STUB
by A1b2rt · poc
https://github.com/A1b2rt/cve-2022-0995
metasploit WORKING POC GREAT
by Jann Horn, bonfee, bwatters-r7 · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb

Scores

CVSS v3 7.8
EPSS 0.1444
EPSS Percentile 94.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (14)
fedoraproject/fedora 35
linux/linux_kernel 5.17 rc1 (7 CPE variants)
linux/linux_kernel 5.8 - 5.10.106
netapp/h300e_firmware
netapp/h300s_firmware
netapp/h410c_firmware
netapp/h410s_firmware
netapp/h500e_firmware
netapp/h500s_firmware
netapp/h610c_firmware
... and 4 more
Published Mar 25, 2022
Tracked Since Feb 18, 2026