CVE-2022-0995

A local privilege escalation vulnerability in the Linux kernel was actively exploited in the wild, allowing attackers to gain root access or cause denial of service.

This out-of-bounds write flaw in the Linux kernel allowed local users to escalate privileges or crash the system. DIB organizations must ensure their Linux-based systems are patched immediately, as this vulnerability was actively exploited in the wild and represents a significant compliance risk under NIST 800-171 for unpatched systems.

Shame score — The vulnerability was actively exploited in the wild (KEV) and allowed privilege escalation, indicating a failure to patch a known, high-severity flaw in a foundational operating system.