CASCACascade Atlas

Evidence dossier

CVE-2022-0995

An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem.

Exploited in the wild (CISA KEV since Aug 26, 2026). NVD reports CVSS 3.1 7.8. EPSS estimates 8.9% exploit likelihood as of Oct 22, 2026.

65.5–77.3Priority evidence range
Evidence through Oct 22, 2026, 6:07 PM UTC

As of Oct 22, 2026

Normalized restatement

An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.

State
PUBLISHED
Published
Mar 25, 2022
Updated
Aug 27, 2026
Evidence coverage
85%

Evidence chronology

What was known when

Download this view's receipt →
  1. Source dateSource date omittedFirst observed by CASCA
    CISA-ADP

    Record text: CISA ADP Vulnrichment

    Inspect raw assertion
    Field
    container
    Value
    CISA ADP Vulnrichment
    Original evidence ↗
  2. Source dateSource date omittedFirst observed by CASCA
    CVE Program

    Record text: CVE Program Container

    Inspect raw assertion
    Field
    container
    Value
    CVE Program Container
    Original evidence ↗
  3. Source dateSource date omittedFirst observed by CASCA
    redhat

    Record text: An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.

    Inspect raw assertion
    Field
    container
    Value
    An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.
    Original evidence ↗
  4. Source dateFirst observed by CASCA
    CISA KEV

    Exploitation cataloged: Linux Kernel Out-of-Bounds Write Vulnerability

    Inspect raw assertion
    Field
    observed_exploitation
    Value
    Linux Kernel Out-of-Bounds Write Vulnerability
    Original evidence ↗
  5. Source dateFirst observed by CASCA
    FIRST EPSS

    EPSS score: 8.86% probability · 95.2th percentile

    Inspect raw assertion
    Field
    model_probability
    Value
    Probability 0.088590000000; percentile 0.952040000000
    Original evidence ↗
ExploitationCatalog member

CISA KEV · catalog date Aug 26, 2026 · first observed Oct 9, 2026

Exploit likelihood8.86%

FIRST EPSS · score date Oct 22, 2026 · 95.2th percentile · first observed Oct 22, 2026

SeverityCVSS 7.8

NVD · CVSS 3.1 · first observed Aug 28, 2026 · same-version scores align in this snapshot

Evidence detail

Source limits and decisions

Why each evidence state has this value

casca-unknown-reasons-v1
Exploitation statusLast verified source snapshot retained

The last verified source boundary remains in force for this claim.

Revision
evidence-policy-v1.1.0
Cutoff
Oct 22, 2026
Resolution
Review source contract
Exploit likelihoodEvidence supported

Eligible evidence is present for this bounded claim.

Revision
evidence-policy-v1.1.0
Cutoff
Oct 22, 2026
Resolution
None
Severity assessmentEvidence supported

Eligible evidence is present for this bounded claim.

Revision
casca-direct-cvss-eligibility-v1
Cutoff
Oct 22, 2026
Resolution
None
Affected productsSource-reported scope

The cited source assertion is retained while canonical product linkage remains open.

Revision
casca-factor-d-obligations-v1
Cutoff
Oct 22, 2026
Resolution
Resolve identity

Source comparison

Who said what

CISA-ADPIndependent enrichment
Record text

CISA ADP Vulnrichment

Inspect raw assertion
Field
container
Value
CISA ADP Vulnrichment
Source dateSource date omittedFirst observed by CASCAOriginal evidence ↗
CVE ProgramDerivative copy
Record text

CVE Program Container

Inspect raw assertion
Field
container
Value
CVE Program Container
Source dateSource date omittedFirst observed by CASCAOriginal evidence ↗
redhatOriginal assertion
Record text

An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.

Inspect raw assertion
Field
container
Value
An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state, potentially allowing a local user to gain privileged access or cause a denial of service on the system.
Source dateSource date omittedFirst observed by CASCAOriginal evidence ↗
CISA KEVOriginal assertion
Exploitation cataloged

Linux Kernel Out-of-Bounds Write Vulnerability

Inspect raw assertion
Field
observed_exploitation
Value
Linux Kernel Out-of-Bounds Write Vulnerability
Source dateFirst observed by CASCAOriginal evidence ↗
FIRST EPSSOriginal assertion
EPSS score

8.86% probability · 95.2th percentile

Inspect raw assertion
Field
model_probability
Value
Probability 0.088590000000; percentile 0.952040000000
Source dateFirst observed by CASCAOriginal evidence ↗

Applicability

Cited product scope

Trace impact →
33Underlying assertions
24Canonical products
22Target assertions
11Constraint assertions

Grouped from 24 configuration nodes in this exact snapshot. Visual grouping is navigational; asset exposure and root cause require cited evidence.

Identity source boundaries
  • Cpe dictionary1,775,266 records · observed through 2026-07-21T06:45:29.809Z27d65b0f-b718-4b4f-bb79-c47c68d09dfa
  • Cpe match643,502 records · observed through 2026-07-21T08:13:17.697Z955dae73-7302-438b-aee1-058d7cc5d48e

25 scope groups

redhat · source assertedn/akernelDirect source scope
Affected: kernel 5.17 rc8
Source-reported scope

Canonical linkage remains open; the cited source assertion is retained below.

Inspect raw assertion[{"status": "affected", "version": "kernel 5.17 rc8"}]
NVD CPE · OPERATING SYSTEMfedoraprojectfedoraVulnerable target · 1 assertions
Version 35Canonical identity product-c96c7662a6606ed7594747da3d7ba9ee3a9758ab11658f6a3f42616361472e47Linked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    1 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    80e516c0-98a4-4ade-b69f-66a772e2baaa
NVD CPE · OPERATING SYSTEMlinuxlinux_kernelVulnerable target · 10 assertions
Any version (unconstrained) (>= 5.11, < 5.15.29); Any version (unconstrained) (>= 5.16, < 5.16.5); Any version (unconstrained) (>= 5.8, < 5.10.106); Version 5.17Canonical identity product-0eda7a801761be4590f267cf319481c8c0aaa30546d99cc064edf77989ce05c9Linked exact
Scope supported
Inspect raw assertions
  1. cpe:2.3:o:linux:linux_kernel:5.17:rc2:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 4
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    e6e34b23-78b4-4516-9bd8-61b33f4ac49a
  2. cpe:2.3:o:linux:linux_kernel:5.17:rc5:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 7
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    efa3917c-c322-4d92-912d-ece45b2e7416
  3. cpe:2.3:o:linux:linux_kernel:5.17:rc3:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 5
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    c030fa3d-03f4-4fb9-9dbf-d08e5cac51aa
  4. cpe:2.3:o:linux:linux_kernel:5.17:rc7:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 9
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    7f635f96-fa0a-4769-ade8-232b3ac9116d
  5. cpe:2.3:o:linux:linux_kernel:5.17:rc4:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 6
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    b2d2677c-5389-4ae9-869d-0f881e80d923
  6. cpe:2.3:o:linux:linux_kernel:5.17:rc1:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 3
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    7bd5f8d9-54fa-4cb0-b4f0-cb0471fddb2d
  7. cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 1
    Logic
    OR
    Version bounds
    from including 5.11; through excluding 5.15.29
    Match ID
    15dc6588-b28f-4637-9a1e-3753b34a40cf
  8. cpe:2.3:o:linux:linux_kernel:5.17:rc6:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 8
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    bed18363-5abc-4639-8bba-68e771e5bb3f
  9. cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 2
    Logic
    OR
    Version bounds
    from including 5.16; through excluding 5.16.5
    Match ID
    1ad9e77e-b27e-450c-8fd8-b64ec5fb002d
  10. cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    0 · node/0 · match 0
    Logic
    OR
    Version bounds
    from including 5.8; through excluding 5.10.106
    Match ID
    ffaca37d-d2ea-44a7-8ed6-e58ee2222afe
NVD CPE · HARDWAREnetapph300eEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-5e8aff139fa83ae85f478f3473c05dbdb594f6f806121b02c3f419f2a2da62d5Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    2 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    7afc73ce-abb9-42d3-9a71-3f5bc5381e0e
NVD CPE · OPERATING SYSTEMnetapph300e_firmwareVulnerable target · 1 assertions
Version not applicableCanonical identity product-fc149af9032ace9a010e9f89149c81bc45faeba303217af053928b26be955f3dLinked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    2 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    108a2215-50fb-4074-94cf-c130fa14566d
NVD CPE · HARDWAREnetapph300sEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-5b787f6fb0dbffca7d5383cfa87cd93654a14ed60ccdd59abc2ba697fe7ead69Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    3 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    9f9c8c20-42eb-4ab5-bd97-212deb070c43
NVD CPE · OPERATING SYSTEMnetapph300s_firmwareVulnerable target · 1 assertions
Version not applicableCanonical identity product-b9e7a301eef0306dd174904e39d76a7c24000b372471d8c7805d9a00b6a6e419Linked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    3 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    6770b6c3-732e-4e22-bf1c-2d2fd610061c
NVD CPE · HARDWAREnetapph410cEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-19a4460172d592ee30b338581dced13baf393eedf54989f7303c0971a7aa6832Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    4 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    cddf61b7-ec5c-467c-b710-b89f502cd04f
NVD CPE · OPERATING SYSTEMnetapph410c_firmwareVulnerable target · 1 assertions
Version not applicableCanonical identity product-3d0915e39b5cbd4a35c4f9144f57e38484db6d2fffb6f1d595f5fd6eb6a7045aLinked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    4 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    234defe0-5ce5-4b0a-96b8-5d227cb8ed31
NVD CPE · HARDWAREnetapph410sEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-ae7668c0a5adbc5d6599144484fb84400193fe6c73d0e6bb570cd2a233e63b35Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    5 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    8497a4c9-8474-4a62-8331-3fe862ed4098
NVD CPE · OPERATING SYSTEMnetapph410s_firmwareVulnerable target · 1 assertions
Version not applicableCanonical identity product-c29ed97377ecd5a1bb977b857e33722917ef8494748bf83825ca6748f85481aeLinked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    5 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    d0b4ad8a-f172-4558-aec6-ff424ba2d912
NVD CPE · HARDWAREnetapph500eEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-e1a5a15eac66519d4e1187be3639955761cab5eb471d3f739edd906febb8b689Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    6 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    803bc414-b250-4e3a-a478-a3881340d6b8
NVD CPE · OPERATING SYSTEMnetapph500e_firmwareVulnerable target · 1 assertions
Version not applicableCanonical identity product-f6f14489b90770f5fcf332bfe05780026ac83b5a028570dad28517167b27d8b7Linked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    6 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    32f0b6c0-f930-480d-962b-3f4efdcc13c7
NVD CPE · HARDWAREnetapph500sEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-4c7f1f62606e18f71887f5954346c3f8c8376e418a089dca8282922aa180aff3Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    7 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    e63d8b0f-006e-4801-bf9d-1c001bbfb4f9
NVD CPE · OPERATING SYSTEMnetapph500s_firmwareVulnerable target · 1 assertions
Version not applicableCanonical identity product-f13a7dff7633e8a34e5465fdbeace2aa7562b47a38b49f4f05dc5e2406bc9c6aLinked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    7 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    7fff7106-ed78-49ba-9ec5-b889e3685d53
NVD CPE · HARDWAREnetapph610cEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-ed4a7e11b44c9039dfd403943a9e472ccedc79d9e8541224473f43934c8070fcLinked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:netapp:h610c:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    8 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    f3d9b255-c1af-42d1-bf9b-13642fbdc080
NVD CPE · OPERATING SYSTEMnetapph610c_firmwareVulnerable target · 1 assertions
Version not applicableCanonical identity product-6b9f0b72c1309966cd256d7a215b9cab906dcc64be1cb9f934c338c91e098620Linked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    8 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    89612649-bacf-4fac-9ba4-324724fd93a6
NVD CPE · HARDWAREnetapph610sEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-3957199dfb29d702382dde1506ec753a2e995f2a797bfa3f56758eba63ced183Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:netapp:h610s:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    9 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    f63a3fa7-aaed-4a9d-9fde-6195302da0f6
NVD CPE · OPERATING SYSTEMnetapph610s_firmwareVulnerable target · 1 assertions
Version not applicableCanonical identity product-ce5a951956802b54eda64165939e5e2c5df7ce5a73bad036b8ea9a7eb7fd5eedLinked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    9 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    fd7cfe0e-9d1e-4495-b302-89c3096fc0df
NVD CPE · HARDWAREnetapph615cEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-52af2574ac0f9c1b487cc0741541f20dd00f4e53cfea1d070b592189144330d5Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:netapp:h615c:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    10 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    7296a1f2-d315-4fd5-8a73-65c480c855be
NVD CPE · OPERATING SYSTEMnetapph615c_firmwareVulnerable target · 1 assertions
Version not applicableCanonical identity product-ca781182502f30abba72205d9867148c0b7d38157be8f19331a6471eb3d41e5eLinked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:netapp:h615c_firmware:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    10 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    5921a877-18bf-43fe-915c-d226e140acfc
NVD CPE · HARDWAREnetapph700eEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-0b15bdf94d171d9ff04dd6ff3be42b5de90d27fbebaa46da1a0a64b95b2b58c1Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    11 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    736aeae9-782b-4f71-9893-ded53367e102
NVD CPE · OPERATING SYSTEMnetapph700e_firmwareVulnerable target · 1 assertions
Version not applicableCanonical identity product-a9b8857994572d5d62ec3361bb9cf6d6b9ed2a9b747716f6a517489acf47bb51Linked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    11 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    0feb3337-bfde-462a-908b-176f92053cec
NVD CPE · HARDWAREnetapph700sEnvironmental constraint · 1 assertions
Version not applicableCanonical identity product-fcd38a3bd0a96c349925cecfd0d22ecf9836f21d88da8f545d6938975aa84275Linked exact
Scope constrained
Inspect raw assertion
  1. cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Environmental constraint
    Configuration
    12 · node/1 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    b06f4839-d16a-4a61-9bb5-55b13f41e47f
NVD CPE · OPERATING SYSTEMnetapph700s_firmwareVulnerable target · 1 assertions
Version not applicableCanonical identity product-3953d9e2b43fe76a6f94d197de1c80572cc133eca41cf7c6f838a4d8f875fb6dLinked exact
Scope supported
Inspect raw assertion
  1. cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*
    Official link
    Linked exact
    Role
    Vulnerable target
    Configuration
    12 · node/0 · match 0
    Logic
    OR
    Version bounds
    No explicit bounds
    Match ID
    56409cec-5a1e-4450-aa42-641e459cc2af

Affected-product evidence

Accepted scope and product mapping

0 canonical links · 2 source-reported links

Source-reported scopeSource-reported scope

Canonical linkage remains open; the cited source assertion is retained below.

Vendor specified only by source · Product specified only by source

Source class
Direct cve affected
Assertions
1
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Oct 22, 2026
Retained assertion IDs
ac3203be-4a55-407e-89d2-07e74ae18936
Source-reported scopeSource-reported scope

Canonical linkage remains open; the cited source assertion is retained below.

Vendor specified only by source · Product specified only by source

Source class
Nvd cpe vulnerable target
Assertions
22
Mapping revision
cpe23-exact-mapping-v1
Observed cutoff
Oct 22, 2026
Retained assertion IDs
167f0e06-a6e3-478e-9dd5-127f8067191a1854025c-c1fe-453c-b001-007b2e7a951d1aedabad-9981-4516-bd99-0affd57f3b851e52f316-8d9e-4664-ad6d-50eef1fd8c86370ac9bb-63da-407b-973c-b8cab9de7fcf383fe3c4-a49e-4efc-88c0-8444d41f5f004adb0f99-9cb3-4bde-bf15-a7f951057a735374513d-6d43-474f-b25e-cba2684596cd56b14c89-6261-43d9-ad6a-5bbaad117b6966bae01a-a664-4fbc-a00d-8fce7943c1916f5a4a4f-6363-4754-8452-d4e4e1510ebb7bcfb3d8-18ae-4497-8c29-88b7cc5ccf548a0a6f3b-5df4-427e-93df-7ae66b333c2cb7ed06b9-7ab6-4d74-b8ff-62df77b4f7d9bb916736-4e7d-4780-8ca9-926ae17bc2fcc0a98a54-b0b1-4d85-87e2-c5efd055326dc17dcf9d-4c67-48b8-8063-57ff0b23210bc78d2387-0167-4089-b3bb-ecda7fc3ca06cbd6511b-517b-4f53-b063-ff963275ef20d6ab6feb-bac8-4102-8894-2bf81d35343ee9a2a990-3cad-4026-bb86-c9c05740dd3eff54eb0d-8d73-47ff-8bbd-0e48c9b99ffb

Assessments

CVSS by origin

7.8
NVDCVSS 3.1 · role Primary · priority eligiblevalid_matchCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.2
NVDCVSS 2.0 · role Primary · priority eligiblevalid_matchAV:L/AC:L/Au:N/C:C/I:C/A:C
7.8
CVE Program sourceCVSS 3.1 · role Secondary · priority eligiblevalid_matchCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.8
CISA-ADPCVSS 3.1 · role unknown · display onlyDirect record assessment retained outside normalized eligibilityCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Direct CVE/CNA normalized decisions

7.8Priority eligible

CISA-ADP

CVSS 3.1 · Secondary · Independent enrichment · rank 2

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Validation
Valid match
Recomputed
7.8
Decision reason
Evidence supported
Policy
casca-direct-cvss-eligibility-v1

Assessments are retained side by side under closed precedence. Cascade never averages CVSS.

Evidence boundaries

  • KEV membership is authoritative for the catalog, not proof of exposure in any environment.
  • EPSS is a dated model probability and not an individual-environment prediction.
  • Affected or fixed status applies only to the exact cited product and version scope; remaining scope stays source-scoped.
  • NVD-carried upstream facts remain derivative; independent corroboration requires a separately authored source.
  • Only NVD metrics validated under the generation-bound calculator are Public Priority eligible; direct CVE record metrics remain display-only.
  • NVD CVSS source eligibility is closed: NVD-authored, exact record-source, or registered same-CVE container origin; unmapped sources remain display-only.
  • Core replay supports the active and immediately prior generation; retrospective valid-at replay is deferred.
  • OSV aggregation and OSV-converted NVD material are not independent corroboration.
  • Red Hat facts are vendor assertions for the exact supplied products.
  • Nonmembership and not-yet-observed states are not proof of safety.