High · published March 25, 2022
CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 95.2th percentile for exploit probability.
An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 5.8, < 5.10.106 | 5.10.106 |
| linux/linux_kernel | ≥ 5.11, < 5.15.29 | 5.15.29 |
| linux/linux_kernel | ≥ 5.16, < 5.16.5 | 5.16.5 |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| fedoraproject/fedora | all versions | — |
| netapp/h300e_firmware | all versions | — |
| netapp/h300s_firmware | all versions | — |
| netapp/h410c_firmware | all versions | — |
| netapp/h410s_firmware | all versions | — |
| netapp/h500e_firmware | all versions | — |
| netapp/h500s_firmware | all versions | — |
| netapp/h610c_firmware | all versions | — |
| netapp/h610s_firmware | all versions | — |
| netapp/h615c_firmware | all versions | — |
| netapp/h700e_firmware | all versions | — |
| netapp/h700s_firmware | all versions | — |