Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2022-2991

23
FAUCET Score

CVE-2022-2991 is a heap-based buffer overflow in the Linux kernel's LightNVM subsystem, affecting Linux kernel versions. This vulnerability allows a local attacker with high privileges to escalate privileges and execute arbitrary code within the kernel. While rated Medium severity (CVSS 6.7), its exploitability requires prior high-privileged access. There is no public exploit code available, and it has not been observed in active exploitation, nor has it garnered significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
< 5.15CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

6.7MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
0.8
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.41%
Probability of exploitation in next 30 days
EPSS Percentile
33.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0041 is in the 83rd percentile among its peer group of 3,720 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

microsoftpatch availablevia msrc
Product: 18605-16820Fixed in: 5.10.145.1-1
microsoftpatch availablevia msrc
Product: cm1 kernel 5.10.145.1-1 on CBL Mariner 1.0Fixed in: 5.10.145.1-1

Vendor Advisories (2)

microsoft2022-Aug/CVE-2022-2991Moderate

A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This vulnerability allows a local attacker to escalate privileges and execute arbitrary code in the context of the kernel. The attacker must first obtain the ability to execute high-privileged code on the target system to exploit this vulnerability.

Aug 9, 2022
redhatCVE-2022-2991Important

kernel: heap-based overflow in LightNVM Subsystem may lead to privilege escalation

Jul 11, 2022

References

git.kernel.org / pub/scm/linux/kernel/git/stable/linux.git/commit/drivers/lightnvm/Kconfig
Mailing ListPatchVendor Advisory
zerodayinitiative.com / advisories/ZDI-22-960
Third Party AdvisoryVDB Entry