← לוח פגיעויות

CVE-2022-0995

גבוהה 7.8 מנוצלת בשטח (KEV)

ניצול פעיל מאומת — קטלוג CISA KEV

שם
Linux Kernel Out-of-Bounds Write Vulnerability
נוסף לקטלוג
יעד טיפול (פדרלי)
פעולה נדרשת
Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

תיאור (מקור, אנגלית)

An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.

מדדים

CVSS 3.1
7.8 (HIGH) מקור הציון: NVD CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS — סבירות ניצול
9% (אחוזון 100) נכון ל-18/10/2026
CWE
CWE-787

מוצרים מושפעים

linux: linux kernel; fedoraproject: fedora; netapp: h300e firmware; netapp: h300e; netapp: h300s firmware; netapp: h300s; netapp: h410c firmware; netapp: h410c; netapp: h410s firmware; netapp: h410s; netapp: h500e firmware; netapp: h500e; netapp: h500s firmware; netapp: h500s; netapp: h610c firmware

קישורים