NetSight
IP …
high7.8

CVE-2022-1055

A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation.

Impact

A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 5.1 before 5.4.177
from 5.5 before 5.10.97
from 5.11 before 5.15.20
from 5.16 before 5.16.6
RedhatEnterprise Linux
Version 8.0
FedoraprojectFedora
Version 35
CanonicalUbuntu Linux
Versions 16.04, 18.04, 20.04, 21.10, 22.04
NetappH300s Firmware
All versions
NetappH500s Firmware
All versions
NetappH700s Firmware
All versions
NetappH300e Firmware
All versions
NetappH500e Firmware
All versions
NetappH700e Firmware
All versions
NetappH410s Firmware
All versions
NetappH410c Firmware
All versions

Weakness classification

CWE-416

References