CVE-2022-0995 Linux Kernel Out-of-Bounds Write
A local attacker can exploit an out-of-bounds write in the Linux kernel watch_queue subsystem to gain privileged access or cause a denial of service.
- Exploited in the wild
- Since 26 Aug 2026
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-0995?
CVE-2022-0995 is a high-severity memory corruption vulnerability in Fedoraproject Fedora, published on 25 Mar 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.
Weakness: CWE-787
Which versions are affected by CVE-2022-0995?
It affects 13 products.
Products include Fedoraproject Fedora, Linux kernel, Netapp H300e Firmware, Netapp H300s Firmware, Netapp H410c Firmware, Netapp H410s Firmware and 7 more.
How do I fix CVE-2022-0995?
Apply the vendor's patch. US federal agencies must fix it by 29 Aug 2026.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2022-0995 being exploited?
Yes. Attackers have exploited CVE-2022-0995 in the wild since at least 26 Aug 2026.
Public exploit code: 1 Metasploit module and 4 proofs of concept on GitHub.
Other vulnerabilities in Fedoraproject Fedora
Sources
Also known as A-227638011, AZL-9152, DEBIAN-CVE-2022-0995, GHSA-q5p3-3mpm-hppr, PUB-A-227638011, UBUNTU-CVE-2022-0995.