🔥 This vulnerability is being actively exploited in the wild (CISA Known Exploited Vulnerabilities catalog)
CVE-2022-0995: Linux Kernel Out-of-Bounds Write Vulnerability
Summary
The Linux Kernel has an out-of-bounds memory write vulnerability (a bug where code writes data beyond the intended memory boundaries), which could let a local user gain admin-level access or crash the system. This vulnerability is being actively exploited in real-world attacks and affects the open-source Linux Kernel component that many products rely on.
Solution / Mitigation
Apply mitigations according to vendor instructions and follow CISA's BOD 26-04 guidance for prioritizing security updates based on risk. If mitigations are unavailable for cloud services, discontinue use of the product. Organizations must evaluate each system's internet exposure and ensure compliance with BOD 26-04 patching guidelines by the due date of 2026-09-09.
Vulnerability Details
EPSS: 6.3%
Yes
🔥 Actively Exploited
August 25, 2026
Classification
Original source: https://nvd.nist.gov/vuln/detail/CVE-2022-0995
First tracked: August 26, 2026 at 02:01 PM
Classified by LLM (prompt v3) · confidence: 65%