What’s Vulnerable › Vulnerabilities
CVE-2022-1055: Use after Free in tc_new_tfilter allowing for privilege escalation in Linux Kernel
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2022-03-29 · updated 2026-08-13
- Weakness: CWE-416
Description
A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5
Affected products
- Canonical Ubuntu Linux: 16.04, 18.04, 20.04, 21.10, 22.04
- Fedoraproject Fedora: 35
- Linux kernel: from 5.1 before 5.4.177; from 5.5 before 5.10.97; from 5.11 before 5.15.20; from 5.16 before 5.16.6 — fixed in 5.10.97, 5.15.20, 5.16.6, 5.4.177
- NetApp H300E Firmware: all versions
- NetApp H300S Firmware: all versions
- NetApp H410C Firmware: all versions
- NetApp H410S Firmware: all versions
- NetApp H500E Firmware: all versions
- NetApp H500S Firmware: all versions
- NetApp H700E Firmware: all versions
- NetApp H700S Firmware: all versions
- Red Hat Enterprise Linux: 8.0
How to fix
Upgrade to a fixed version: Linux kernel 5.10.97, 5.15.20, 5.16.6, 5.4.177. Check the vendor advisory for mitigations.
References
- http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5
- https://kernel.dance/#04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5
- https://security.netapp.com/advisory/ntap-20220506-0007/
- https://syzkaller.appspot.com/bug?id=2212474c958978ab86525fe6832ac8102c309ffc
- http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5
- https://kernel.dance/#04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5
- https://security.netapp.com/advisory/ntap-20220506-0007/
- https://syzkaller.appspot.com/bug?id=2212474c958978ab86525fe6832ac8102c309ffc
Get alerted when CVE-2022-1055 or the next vulnerability affects your stack