CVE-2022-0995

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17-rc8

Description An out-of-bounds (OOB) memory write flaw exists in the watch queue event notification subsystem. This issue allows a local user to overwrite parts of the kernel state, which can lead to a denial of service or the acquisition of privileged access, such as root privileges. Technical exploitation may involve using PageJack to create a page-level Use-After-Free (UAF), a condition where the system continues to use a pointer after the memory it points to has been freed, to overwrite the struct file for local privilege escalation.

Recommendations Update the kernel to version 5.17-rc8 or later.