Critical Actively exploited
CVE-2022-0995
Linux Kernel Out-of-Bounds Write Vulnerability
What this means
- Weakness
- An out-of-bounds write corrupts neighbouring memory and often enables code execution.
- Likelihood
- Exploitation is not hypothetical: CISA has observed it in the wild.
What to doTop priority: CISA sets the remediation deadline at 9 September 2026.
Read automatically from the CVSS vector, the weakness type (CWE) and the EPSS score. The technical description above remains the one published by NIST.