CVE-2022-0995High· 7.8▾ Abyssal⚠ Exploited in the wildPoC availableAn out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a …
▾ Abyssal zone — Critical with a public exploit or in-the-wild use
impact 42.9 · likelihood 1.8 · exploitation 25
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 2 sources. Availability, not in-the-wild use.
Exploit-prediction probability, daily snapshots since Aug 26.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
Federal remediation due Aug 29, 2026
6.3%
6.3% → 9.5%
4 GitHub repos · Metasploit ×1
Added to the CISA catalog on Aug 26, 2026. Federal remediation due Aug 29, 2026. View catalog ↗
An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.
linux_kernel >= 5.8, < 5.10.106linux_kernel >= 5.11, < 5.15.29linux_kernel >= 5.16, < 5.16.5linux_kernel = 5.17fedora = 35h300e_firmwareh300s_firmwareh410c_firmwareh410s_firmwareh500e_firmwareh500s_firmwareh610c_firmwareh610s_firmwareh615c_firmwareh700e_firmwareh700s_firmwareUpgrade past the affected range:
linux_kernel 5.16.5Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2022-1015Medium· 6.6A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem
CVE-2022-36280Medium· 6.3An out-of-bounds(OOB) memory access vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_kms.c in GPU component in the Linux kernel with device file '/dev/dri/renderD128 (or Dxxx)'
CVE-2022-3028High· 7.0A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously
CVE-2021-33655Medium· 6.7When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.
CVE-2022-0500High· 7.8A flaw was found in unrestricted eBPF usage by the BPF_BTF_LOAD, leading to a possible out-of-bounds memory write in the Linux kernel’s BPF subsystem due to the way a user loads BTF
CVE-2020-14390Medium· 5.6A flaw was found in the Linux kernel in versions before 5.9-rc6