{"vulnerability": "CVE-2022-0995", "sightings": [{"uuid": "ddd4c5e2-382e-4c7b-8cbe-3191412cc448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "7740936b-e925-4d9e-a497-baeb0de96e5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:42.000000Z"}, {"uuid": "b1f0c4d7-80dd-4a34-bb52-35236389f880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb", "content": "", "creation_timestamp": "2022-04-21T16:42:05.000000Z"}, {"uuid": "5825c46d-c5b8-46fc-8513-f7df9f04cdf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:01.000000Z"}, {"uuid": "7d694fc3-e7c6-4142-9ca5-9674d357cba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2022-0995", "type": "seen", "source": "https://infosec.exchange/users/quarkslab/statuses/116211295316386323", "content": "", "creation_timestamp": "2026-03-11T15:40:56.224095Z"}, {"uuid": "3ac5f376-1e85-4c33-a01e-71c31ebd2604", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/1724", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-0995 exploit\nURL\uff1ahttps://github.com/Bonfee/CVE-2022-0995\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-03-27T09:13:01.000000Z"}, {"uuid": "3291719d-9dc1-41ce-a125-72023702e9ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "published-proof-of-concept", "source": "https://t.me/YAH_Channel/518", "content": "\u0421\u0432\u0435\u0436\u0435\u043d\u044c\u043a\u0438\u0439 LPE \u0432 Linux: CVE-2022-0995 \u0447\u0435\u0440\u0435\u0437 heap out-of-bounds write.\n\n\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442: https://github.com/Bonfee/CVE-2022-0995", "creation_timestamp": "2022-03-29T06:57:49.000000Z"}, {"uuid": "5322f0df-d572-4897-9892-088d799b96b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "published-proof-of-concept", "source": "https://t.me/poxek/1172", "content": "CVE-2022-0995 exploit for Ubuntu\n\u25b6\ufe0f \u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "creation_timestamp": "2022-03-29T17:38:09.000000Z"}, {"uuid": "def459cf-fbf2-4c42-91aa-0140b3b161a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "Telegram/TXmZ8EBGvdc4uufvEqu6hfgyjEc7K_gjD1Jpp8Uzvu6-KK0", "content": "", "creation_timestamp": "2023-03-23T09:18:19.000000Z"}, {"uuid": "2c76e5bc-aad4-48cb-9abb-1289d7b8dab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/1427", "content": "kernel-linux-factory\n*\n\u0423\u0434\u043e\u0431\u043d\u043e \u0442\u0435\u043c, \u0447\u0442\u043e \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u043a\u043e\u043c\u043f\u0438\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0442\u044c \u0441\u0440\u0435\u0434\u0443, \u0433\u043b\u044f\u043d\u0443\u043b \u043a\u0430\u043a\u043e\u0435 \u044f\u0434\u0440\u043e, \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b \u0441\u043f\u043b\u043e\u0435\u0442, \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043f\u043e \u043c\u043e\u0440\u0434\u0435 #root\n*\n\u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 exploits \u0434\u043b\u044f:\nCVE-2016-9793\n4-20-BPF-integer\nCVE-2017-5123\nCVE-2017-6074\nCVE-2017-7308\nCVE-2017-8890\nCVE-2017-11176\nCVE-2017-16995\nCVE-2017-1000112\nCVE-2018-5333\nCVE-2019-9213 & CVE-2019-8956\nCVE-2019-15666\nCVE-2020-8835\nCVE-2020-27194\nCVE-2021-3156\nCVE-2021-31440\nCVE-2021-3490\nCVE-2021-22555\nCVE-2021-41073\nCVE-2021-4154\nCVE-2021-42008\nCVE-2021-43267\nCVE-2022-0185\nCVE-2022-0847\nCVE-2022-0995\nCVE-2022-1015\nCVE-2022-2588\nCVE-2022-2639\nCVE-2022-25636\nCVE-2022-27666\nCVE-2022-32250\nCVE-2022-34918\n\ndownload\n\n#linux #exploits #kernel", "creation_timestamp": "2023-03-23T06:30:43.000000Z"}, {"uuid": "a0fd94f5-e4fc-42d9-9ab9-a53cf3a07f19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "published-proof-of-concept", "source": "https://t.me/reconshell/1230", "content": "CVE-2022-0995 exploit for Ubuntu\n\n#CVE-2022-0995 #Ubuntu #Exploit #Linux #RootExploit\n#Hacking #Bugbounty #PrivilegeEscalation #Malware\n\nhttps://reconshell.com/cve-2022-0995-exploit-for-ubuntu/", "creation_timestamp": "2022-03-29T10:40:47.000000Z"}, {"uuid": "8d5ec13a-7fc7-410b-945b-32e2dc087df8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "published-proof-of-concept", "source": "Telegram/ej7ZJDIGxurOkztgDxwGfL9KgrhSDL1dIKsKq1X6lhRCbpo", "content": "", "creation_timestamp": "2022-03-29T17:28:42.000000Z"}, {"uuid": "63088c6e-3c3a-4394-9ef6-b705bb58eb49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/2253", "content": "CVE-2022-0995 exploit (heap out-of-bounds write in the watch_queue Linux kernel component) https://github.com/Bonfee/CVE-2022-0995", "creation_timestamp": "2026-08-03T01:06:34.125747Z"}, {"uuid": "851bf71b-6e2c-4962-8d2c-26cf436f3640", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "published-proof-of-concept", "source": "https://t.me/reverse_dungeon/1530", "content": "\u0421\u0432\u0435\u0436\u0435\u043d\u044c\u043a\u0438\u0439 LPE \u0432 Linux: CVE-2022-0995 \u0447\u0435\u0440\u0435\u0437 heap out-of-bounds write.\n\n\u0421\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442: https://github.com/Bonfee/CVE-2022-0995", "creation_timestamp": "2022-03-28T10:29:32.000000Z"}, {"uuid": "4b08ed59-6efc-4297-bae9-f4466c39811c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "https://t.me/BlueRedTeam/1965", "content": "#exploit\n+ bluez: malicious USB devices can steal Bluetooth link keys over HCI using fake BD_ADDR, plus bluetoothd double-free\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2256\n\n+ CVE-2022-0995:\nLinux: watch_queue filter OOB write (and other bugs)\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2274\n\n@BlueRedTeam", "creation_timestamp": "2022-04-21T08:34:01.000000Z"}, {"uuid": "58acb456-4faf-4b30-98b5-c2e78096fa7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/1845", "content": "#CVE-2022\nCVE-2022-0995 exploit\nhttps://github.com/Bonfee/CVE-2022-0995\n\n@BlueRedTeam", "creation_timestamp": "2022-03-28T09:40:45.000000Z"}, {"uuid": "10c75461-0c80-445d-aed3-466b0fee01bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/5706", "content": "#exploit\n1. CVE-2022-0995:\nHeap out-of-bounds write in the watch_queue Linux kernel component\nhttps://github.com/Bonfee/CVE-2022-0995\n\n2. Script for 2FA bypass that replay Citrix credentials\nhttps://github.com/post-cyberlabs/Offensive_tools/tree/main/Citrix\n\n3. ABC-Code Execution for Veeam (CVE-2022-26503 LPE)\nhttps://www.mdsec.co.uk/2022/03/abc-code-execution-for-veeam", "creation_timestamp": "2022-03-30T11:03:01.000000Z"}, {"uuid": "677df61f-0f21-4294-996a-090ee6947738", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/5854", "content": "#exploit\n1. bluez: malicious USB devices can steal Bluetooth link keys over HCI using fake BD_ADDR, plus bluetoothd double-free\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2256\n\n2. CVE-2022-0995:\nLinux: watch_queue filter OOB write (and other bugs)\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2274", "creation_timestamp": "2022-04-21T11:07:01.000000Z"}, {"uuid": "8fe298ad-2fdf-4d09-8595-3a182f2a0151", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "Telegram/EWYW-JRR6Ao35LuisrucjGoi7XP5jTbQUklI3Clj4ygTs-s", "content": "", "creation_timestamp": "2022-03-30T02:13:01.000000Z"}, {"uuid": "e3693e00-a612-4827-a4de-6d38180f4951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "https://t.me/onelab1337/2186", "content": "#exploit\n1. bluez: malicious USB devices can steal Bluetooth link keys over HCI using fake BD_ADDR, plus bluetoothd double-free\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2256\n\n2. CVE-2022-0995:\nLinux: watch_queue filter OOB write (and other bugs)\nhttps://bugs.chromium.org/p/project-zero/issues/detail?id=2274\n\n\n#Cloud_Security\n1. AWS's Log4Shell Hot Patch Vulnerable to Container Escape and Privilege Escalation\nhttps://unit42.paloaltonetworks.com/aws-log4shell-hot-patch-vulnerabilities\n\n2. Abusing Azure Container Registry Tasks\nhttps://posts.specterops.io/abusing-azure-container-registry-tasks-1f407bfaa465\n\n#Threat_Research\nUsing Emulation Against Anti-Reverse Engineering Techniques\nhttps://www.fortinet.com/blog/threat-research/Using-emulation-against-anti-reverse-engineering-techniques", "creation_timestamp": "2026-08-09T04:33:48.515373Z"}, {"uuid": "b2c1e214-1d01-47a8-931a-b038cc5ccf7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "https://t.me/onelab1337/2168", "content": "#exploit\n1. CVE-2022-0995:\nHeap out-of-bounds write in the watch_queue Linux kernel component\nhttps://github.com/Bonfee/CVE-2022-0995\n\n2. Script for 2FA bypass that replay Citrix credentials\nhttps://github.com/post-cyberlabs/Offensive_tools/tree/main/Citrix\n\n3. ABC-Code Execution for Veeam (CVE-2022-26503 LPE)\nhttps://www.mdsec.co.uk/2022/03/abc-code-execution-for-veeam", "creation_timestamp": "2026-08-09T04:33:48.776213Z"}, {"uuid": "ab5b56d1-1ae7-4a89-9f58-d7155cbcb8c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "published-proof-of-concept", "source": "https://t.me/onelab1337/2168", "content": "#exploit\n1. CVE-2022-0995:\nHeap out-of-bounds write in the watch_queue Linux kernel component\nhttps://github.com/Bonfee/CVE-2022-0995\n\n2. Script for 2FA bypass that replay Citrix credentials\nhttps://github.com/post-cyberlabs/Offensive_tools/tree/main/Citrix\n\n3. ABC-Code Execution for Veeam (CVE-2022-26503 LPE)\nhttps://www.mdsec.co.uk/2022/03/abc-code-execution-for-veeam", "creation_timestamp": "2026-08-10T00:00:27.376496Z"}, {"uuid": "fbdb7ab5-64a5-4831-8e6d-b98d88ebd626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mu7xerbdh32l", "content": "~Cisa~\nCISA added six actively exploited vulnerabilities, urging rapid remediation.\n-\nIOCs: CVE-2026-8452, CVE-2019-1068, CVE-2022-0995\n-\n#CVE #KEV #ThreatIntel", "creation_timestamp": "2026-08-29T13:13:25.257933Z"}, {"uuid": "3656f582-d045-4f63-86af-e37efa394d9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mu2ofykvgg2b", "content": "\ud83d\udea8 Executive Risk Brief: CVE-2022-0995 targets the Linux Kernel via an out-of-bounds write flaw enabling privilege escalation. Leaders must review asset visibility, patch cadence, and risk governance. Read the full CSUITE brief: https://thecybermind.co/rzv2", "creation_timestamp": "2026-08-27T10:49:44.707825Z"}, {"uuid": "59366a04-23ac-45dd-9423-d49051fc7db5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "https://t.me/EchelonEyes/103", "content": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-0995\n\n\u041d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0434\u043b\u044f \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c Github \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u0430 \u043d\u0430 Ubuntu 21.10 \u0441 \u044f\u0434\u0440\u043e\u043c 5.13.0-37.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-0995  \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e heap out-of-bounds write \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 watch_queue \u044f\u0434\u0440\u0430 Linux. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0435\u0435, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0447\u0430\u0441\u0442\u044c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u044f\u0434\u0440\u0430, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438\u043b\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u044f\u0434\u0440\u0430 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.17-rc8.\n\nhttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=93ce93587d36493f2f86921fa79921b3cba63fbb \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Linux", "creation_timestamp": "2026-07-17T05:00:08.656203Z"}, {"uuid": "e23efae7-41d2-4586-9ff1-9a8e257834b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "https://t.me/EchelonEyes/119", "content": "\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux \u2013 \u0432\u0441\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u0443\u0440\u043e\u0432\u043d\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u044b \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE-2022-27666 \u0438 CVE-2022-0995.\n\nCVE-2022-0995 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c heap out-of-bounds write \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 watch_queue \u044f\u0434\u0440\u0430 Linux, \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043d\u0430 \u043f\u043b\u043e\u0449\u0430\u0434\u043a\u0435 Github. CVE-2022-27666 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 heap buffer overflow.\n\n\u0414\u043b\u044f \u043e\u0431\u0435\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u043c\u0435\u044e\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438:\n\nhttps://security-tracker.debian.org/tracker/CVE-2022-0995\nhttps://github.com/Bonfee/CVE-2022-0995\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-27666\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Linux", "creation_timestamp": "2026-07-17T06:00:05.922409Z"}, {"uuid": "7f95f46c-e9f2-4eff-959d-b8bc0f893ac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/119", "content": "\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044f\u0434\u0440\u0435 Linux \u2013 \u0432\u0441\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u0443\u0440\u043e\u0432\u043d\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u044b \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE-2022-27666 \u0438 CVE-2022-0995.\n\nCVE-2022-0995 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c heap out-of-bounds write \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 watch_queue \u044f\u0434\u0440\u0430 Linux, \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043d\u0430 \u043f\u043b\u043e\u0449\u0430\u0434\u043a\u0435 Github. CVE-2022-27666 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 heap buffer overflow.\n\n\u0414\u043b\u044f \u043e\u0431\u0435\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u043c\u0435\u044e\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438:\n\nhttps://security-tracker.debian.org/tracker/CVE-2022-0995\nhttps://github.com/Bonfee/CVE-2022-0995\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-27666\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Linux", "creation_timestamp": "2026-07-18T00:00:35.729343Z"}, {"uuid": "e8066cf1-4c68-4892-859e-e2044454c413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/103", "content": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-0995\n\n\u041d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 \u0434\u043b\u044f \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c Github \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u0430 \u043d\u0430 Ubuntu 21.10 \u0441 \u044f\u0434\u0440\u043e\u043c 5.13.0-37.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-0995  \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e heap out-of-bounds write \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 watch_queue \u044f\u0434\u0440\u0430 Linux. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0435\u0435, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u0447\u0430\u0441\u0442\u044c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f \u044f\u0434\u0440\u0430, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438\u043b\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u044f\u0434\u0440\u0430 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.17-rc8.\n\nhttps://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=93ce93587d36493f2f86921fa79921b3cba63fbb \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Linux", "creation_timestamp": "2026-07-18T00:00:35.563512Z"}, {"uuid": "9d4468ab-7e03-4173-b63d-5bae91cec751", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "https://bsky.app/profile/thecybermind.co/post/3mu2zhqr5xl24", "content": "\ud83d\udea8 Critical Threat Intel: CVE-2022-0995 impacts the Linux kernel watch_queue subsystem via out-of-bounds memory writes, enabling local root privilege escalation. Review IOCs, Splunk/Sentinel queries, and kernel hardening actions: https://thecybermind.co/heaz", "creation_timestamp": "2026-08-27T14:07:34.149161Z"}, {"uuid": "a9d08e54-8da8-4e21-b862-c38d2b85742b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mtyuwvscml2v", "content": "\ud83d\uded1 CVE-2022-0995\nLinux Kernel\nCVSS 7.8 / EPSS 6% / KEV: No\nTL;DR: An out-of-bounds (OOB) memory write flaw was found in the Linux kernel\u2019s watch_queue event notif\u2026\nhttps://cvesentinel.com/report/CVE-2022-0995?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "creation_timestamp": "2026-08-26T17:41:13.864549Z"}, {"uuid": "6cf544f8-153d-4772-aa28-4a56f010e89c", "vulnerability_lookup_origin": "405284c2-e461-4670-8979-7fd2c9755a60", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a8393774-88c9-42ce-bcc5-0af05efcc41c", "content": "", "creation_timestamp": "2026-08-26T18:00:02.619093Z"}, {"uuid": "b5f2af48-279d-4b3a-94a6-2bc687d62c2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mtz2gcttqv2w", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2022-0995: An out-of-bounds (OOB) memory write flaw was found in the Linux kernel\u2019s watch_queue event notification subsystem\nCVSS 7.8 \u00b7 EPSS 6.3% \u00b7 CISA KEV\nhttps://beta.vulnsea.com/cve/CVE-2022-0995\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-08-26T19:19:20.123875Z"}, {"uuid": "4e8a6def-b9ff-4f44-b7a9-ccd11dcef164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "https://bsky.app/profile/secdb.bsky.social/post/3mtzefi2rys2j", "content": "\ud83d\udea8 CISA Adds 6 KEV to Catalog\n\n\ud83d\udd34 CVE-2015-3246 Red Hat Libuser\n\ud83d\udfe0 CVE-2015-5287 Red Hat Automatic Bug Reporting Tool\n\ud83d\udd34 CVE-2019-1068 MS SQL Server\n\ud83d\udd34 CVE-2021-23758 Ajax.NET Professional\n\ud83d\udd34 CVE-2022-0995 Linux Kernel\n\ud83d\udd34 CVE-2026-8452 Citrix NetScaler ADC & NetScaler GW\n\nsecdb.nttzen.cloud/security-adv...", "creation_timestamp": "2026-08-26T22:17:50.375998Z"}, {"uuid": "a341c698-c3ec-412c-9e5b-e30805e7f66d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "https://bsky.app/profile/csirts.com/post/3mtziqvpml22q", "content": "\ud83d\udea8 Added to CISA KEV \u2014 actively exploited:\nCVE-2022-0995: Linux Kernel Out-of-Bounds Write Vulnerability\n\nhttps://www.csirts.com/cve/CVE-2022-0995", "creation_timestamp": "2026-08-26T23:35:48.011859Z"}, {"uuid": "89bacabe-57ab-4c72-92f9-517d38c182e4", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5b507c89-944d-4a81-954c-f13a6e9b9153", "content": "", "creation_timestamp": "2026-08-27T18:00:32.533340Z"}, {"uuid": "e326e080-cdb3-42a1-95be-fca4aa0054ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mu7jbdiyst2p", "content": "CISA just flagged a 2022 Linux kernel flaw (CVE-2022-0995) as actively exploited. A local user can escalate to root.\n\nThe fix shipped in 2022. The catch: a server stays vulnerable until it reboots into the patched kernel.\n\nCheck uname -r, not your package list. Deadline: Sep 9.", "creation_timestamp": "2026-08-29T09:01:06.130746Z"}, {"uuid": "d6f6f14c-7e39-4a4f-9805-aafc4acefa36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3mu27x3m6p22z", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2022-0995: \u26a0\ufe0f CVE-2022-0995: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 6.3%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2022-0995-an-out-of-bounds-oob-memory-write-flaw", "creation_timestamp": "2026-08-27T06:30:50.755645Z"}, {"uuid": "13c2e62e-6a96-4107-9f39-af1a2d08d32e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mu2ff4b2qj24", "content": "\ud83e\udd16 CISA added 6 actively exploited flaws to its KEV catalog: MS SQL Server RCE (CVE-2019-1068), Citrix NetScaler overflow (CVE-2026-8452), Linux kernel privesc (CVE-2022-0995), and more.\nhttps://thehackernews.com/2026/08/cisa-adds-six-exploited-flaws-to-kev.html", "creation_timestamp": "2026-08-27T08:08:10.219194Z"}, {"uuid": "609bc332-79aa-49b4-adff-7f4a48bf0b12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "https://t.me/reverseame/2253", "content": "CVE-2022-0995 exploit (heap out-of-bounds write in the watch_queue Linux kernel component) https://github.com/Bonfee/CVE-2022-0995", "creation_timestamp": "2026-07-29T12:02:43.327679Z"}, {"uuid": "165bc1eb-e8b6-4675-8987-d5a78a93b009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "https://t.me/VulnerabilityNews/44179", "content": "CISA Adds Six Known Exploited Vulnerabilities to Catalog\n\nCISA has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2015-3246 Red Hat Libuser Race Condition Vulnerability\nCVE-2015-5287 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability\nCVE-2019-1068 Microsoft SQL Server Remote Code Execution Vulnerability\nCVE-2021-23758 Ajax.NET Professional Deserialization of Untrusted Data Vulnerability\nCVE-2022-0995 Linux Kernel Out-of-Bounds Write Vulnerability\nCVE-2026-8452 Citrix NetScaler ADC and NetScaler Gateway Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability\nThese types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\nAware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA\u2019s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/08/26/cisa-adds-six-known-exploited-vulnerabilities-catalog", "creation_timestamp": "2026-09-18T12:00:05.768782Z"}, {"uuid": "dc73acbf-7fee-4279-ba53-cc1d0e15fc71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0995", "type": "seen", "source": "https://bsky.app/profile/linkersec.bsky.social/post/3mwnqbm4kbk2v", "content": "PageJack in Action: CVE-2022-0995 exploit\n\nArticle by Jean Vincent describing how a relatively old CVE can be exploited using the PageJack exploitation technique.\n\nblog.quarkslab.com/pagejack-in-...", "creation_timestamp": "2026-09-29T11:34:43.654248Z"}]}