CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
1 advisories matched
2022-03-25
Linux Kernel watch_queue Subsystem Out-of-Bounds Write Vulnerability (CVE-2022-0995) Advisory
[Affected Scope] Linux kernel versions from 5.8 up to 5.17-rc8 utilizing the watch_queue event notification subsystem.
[Impact] A local unprivileged attacker can overwrite kernel state memory, potentially leading to local privilege escalation (LPE) to root or system denial of service (DoS).
[Mitigation] Apply the latest kernel security patches immediately, or restrict unprivileged user namespaces as a temporary mitigation.