Related Vulnerabilities: CVE-2022-0995  

An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.

Description

An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.

Statement

There was no shipped kernel version that was seen affected by this problem.

There was no shipped kernel version that was seen affected by this problem.

Mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

Additional Information

  • Bugzilla 2063786: CVE-2022-0995 kernel: kernel bug in the watch_queue subsystem
  • CWE-787: Out-of-bounds Write
  • FAQ: Frequently asked questions about CVE-2022-0995