Linux Kernel Out-of-Bounds Write (CVE‑2022‑0995) – Local Privilege Escalation & DoS
What It Is – CVE‑2022‑0995 is an out‑of‑bounds memory‑write flaw in the Linux kernel. A local, unprivileged user can trigger the bug to gain root‑level privileges or cause a denial‑of‑service condition.
Exploitability – The vulnerability is exploitable locally without special conditions; a proof‑of‑concept exists. NVD assigns a CVSS v3.1 base score of 7.8 (High).
Affected Products – All Linux distributions that ship the vulnerable kernel code (e.g., kernels 5.10‑5.15 and earlier). Vendors typically release patches through their standard update channels.
Why It Matters for Trust & Control Assurance
- Continuous patch‑management evidence shows you’re meeting the “maintain secure configurations” control objective across frameworks.
- Demonstrable remediation (e.g., updated kernel version) provides audit‑ready proof of due‑diligence for regulators and enterprise buyers.
- Real‑time monitoring of kernel versions feeds into a defensible control‑assurance trail, reducing risk of privilege‑escalation incidents that could invalidate compliance attestations.
Recommended Actions
- Verify the kernel version on all Linux assets against the vendor‑issued patch list.
- Apply the latest security updates from your distribution’s repository immediately.
- Update your asset inventory and configuration‑management database to record the patched state.
- Enable continuous monitoring to alert on any re‑introduction of the vulnerable kernel version.
- Document the remediation steps and retain logs as evidence for audit purposes.
Source: CISA KEV – CVE‑2022‑0995