CVE-2022-0995

KEV
Published: Mar 25, 2022 Last Modified: Nov 21, 2024
ExploitDB:
Other exploit source:
Google Dorks:
HIGH 7,8
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: high
Integrity: high
Availability: high
HIGH 7,2
Source: [email protected]
Access Vector: local
Access Complexity: low
Authentication: none
Confidentiality: complete
Integrity: complete
Availability: complete

Description

AI Translation Available

An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.

EPSS (Exploit Prediction Scoring System)

Trend Analysis

EPSS (Exploit Prediction Scoring System)

Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.

EPSS Score
0,2182
Percentile
1,0th
Updated

EPSS Score Trend (Last 75 Days)

787

Out-of-bounds Write

Draft
Abstraction: Base Structure: Simple
Common Consequences
Security Scopes Affected:
Integrity Availability Other
Potential Impacts:
Modify Memory Execute Unauthorized Code Or Commands Dos: Crash, Exit, Or Restart Unexpected State
Applicable Platforms
Languages: Assembly, C, C++, Memory-Unsafe
Technologies: ICS/OT
Likelihood of Exploit: High
View CWE Details
Operating System

H700E Firmware by Netapp

Product Information
Vendor Netapp
Product H700E Firmware
Version -
cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

H300E Firmware by Netapp

Product Information
Vendor Netapp
Product H300E Firmware
Version -
cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Kernel by Linux

Product Information
Vendor Linux
Product Linux Kernel
Version Range Affected
From 5.11 (inclusive)
To 5.15.29 (exclusive)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Kernel by Linux

Product Information
Vendor Linux
Product Linux Kernel
Version Range Affected
From 5.16 (inclusive)
To 5.16.5 (exclusive)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

H410C Firmware by Netapp

Product Information
Vendor Netapp
Product H410C Firmware
Version -
cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

H500E Firmware by Netapp

Product Information
Vendor Netapp
Product H500E Firmware
Version -
cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

H700S Firmware by Netapp

Product Information
Vendor Netapp
Product H700S Firmware
Version -
cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

H615C Firmware by Netapp

Product Information
Vendor Netapp
Product H615C Firmware
Version -
cpe:2.3:o:netapp:h615c_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

H300S Firmware by Netapp

Product Information
Vendor Netapp
Product H300S Firmware
Version -
cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Kernel by Linux

Product Information
Vendor Linux
Product Linux Kernel
Version 5.17
cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Kernel by Linux

Product Information
Vendor Linux
Product Linux Kernel
Version 5.17
cpe:2.3:o:linux:linux_kernel:5.17:rc7:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

H500S Firmware by Netapp

Product Information
Vendor Netapp
Product H500S Firmware
Version -
cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Fedora by Fedoraproject

Product Information
Vendor Fedoraproject
Product Fedora
Version 35
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

H610C Firmware by Netapp

Product Information
Vendor Netapp
Product H610C Firmware
Version -
cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Kernel by Linux

Product Information
Vendor Linux
Product Linux Kernel
Version 5.17
cpe:2.3:o:linux:linux_kernel:5.17:rc4:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Kernel by Linux

Product Information
Vendor Linux
Product Linux Kernel
Version 5.17
cpe:2.3:o:linux:linux_kernel:5.17:rc6:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Kernel by Linux

Product Information
Vendor Linux
Product Linux Kernel
Version 5.17
cpe:2.3:o:linux:linux_kernel:5.17:rc3:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

H410S Firmware by Netapp

Product Information
Vendor Netapp
Product H410S Firmware
Version -
cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Kernel by Linux

Product Information
Vendor Linux
Product Linux Kernel
Version 5.17
cpe:2.3:o:linux:linux_kernel:5.17:rc2:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Kernel by Linux

Product Information
Vendor Linux
Product Linux Kernel
Version 5.17
cpe:2.3:o:linux:linux_kernel:5.17:rc5:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

H610S Firmware by Netapp

Product Information
Vendor Netapp
Product H610S Firmware
Version -
cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
Operating System

Linux Kernel by Linux

Product Information
Vendor Linux
Product Linux Kernel
Version Range Affected
From 5.8 (inclusive)
To 5.10.106 (exclusive)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
http://packetstormsecurity.com/files/166770/Linux-watch_que…
Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/166770/Linux-watch_queue-Filter-Out-Of-Bou…
http://packetstormsecurity.com/files/166815/Watch-Queue-Out…
Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/166815/Watch-Queue-Out-Of-Bounds-Write.html
https://bugzilla.redhat.com/show_bug.cgi?id=2063786
Issue Tracking Patch Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2063786
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/li…
Patch Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9…
https://security.netapp.com/advisory/ntap-20220429-0001/
Third Party Advisory
https://security.netapp.com/advisory/ntap-20220429-0001/
http://packetstormsecurity.com/files/166770/Linux-watch_que…
Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/166770/Linux-watch_queue-Filter-Out-Of-Bou…
http://packetstormsecurity.com/files/166815/Watch-Queue-Out…
Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/166815/Watch-Queue-Out-Of-Bounds-Write.html
https://bugzilla.redhat.com/show_bug.cgi?id=2063786
Issue Tracking Patch Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2063786
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/li…
Patch Vendor Advisory
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9…
https://security.netapp.com/advisory/ntap-20220429-0001/
Third Party Advisory
https://security.netapp.com/advisory/ntap-20220429-0001/