CVE-2022-0995

CISA KEV

ACT NOW Priority: 0.00 BB Relevance: 0/100

Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Linux Kernel contains an out-of-bounds memory write vulnerability which could allow a local user to gain privileged access or cause a denial of service on the system.

CISA Known Exploited Vulnerability

Vendor / Product Linux — Kernel

Date Added 2026-08-26

Remediation Due 2026-08-29

This vulnerability affects an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=93ce93587d36493f2f86921fa79921b3cba63fbb ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2022-0995

Weakness Classification (1)

CWE-787

Affected Software (22)

Vendor	Product	Version
fedoraproject	fedora	35
linux	linux_kernel	5.8 – 5.10.106
linux	linux_kernel	5.11 – 5.15.29
linux	linux_kernel	5.16 – 5.16.5
linux	linux_kernel	5.17
linux	linux_kernel	5.17
linux	linux_kernel	5.17
linux	linux_kernel	5.17
linux	linux_kernel	5.17
linux	linux_kernel	5.17
linux	linux_kernel	5.17
netapp	h300e_firmware	-
netapp	h300s_firmware	-
netapp	h410c_firmware	-
netapp	h410s_firmware	-
netapp	h500e_firmware	-
netapp	h500s_firmware	-
netapp	h610c_firmware	-
netapp	h610s_firmware	-
netapp	h615c_firmware	-
netapp	h700e_firmware	-
netapp	h700s_firmware	-