ISOMAN

CVE

CVE-2022-1055

A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5

Severity
HIGH
CVSS
8.6
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Ubuntu22.04.5 amd64 desktopunknownsource
Ubuntu22.04.5 amd64 live-serverunknownsource
Ubuntu20.04.6 amd64 desktopunknownsource
Ubuntu20.04.6 amd64 live-serverunknownsource
Ubuntu18.04.6 amd64 desktopunknownsource
Ubuntu18.04.6 amd64 live-serverunknownsource

References

  1. http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html
  2. https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5
  3. https://kernel.dance/#04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5
  4. https://security.netapp.com/advisory/ntap-20220506-0007/
  5. https://syzkaller.appspot.com/bug?id=2212474c958978ab86525fe6832ac8102c309ffc
  6. http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html
  7. https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5
  8. https://kernel.dance/#04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5
  9. https://security.netapp.com/advisory/ntap-20220506-0007/
  10. https://syzkaller.appspot.com/bug?id=2212474c958978ab86525fe6832ac8102c309ffc