A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5
References
Link | Resource |
---|---|
http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html | Third Party Advisory VDB Entry |
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5 | Patch Vendor Advisory |
https://kernel.dance/#04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5 | Exploit Patch Third Party Advisory |
https://security.netapp.com/advisory/ntap-20220506-0007/ | Third Party Advisory |
https://syzkaller.appspot.com/bug?id=2212474c958978ab86525fe6832ac8102c309ffc | Exploit Patch Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
AND |
|
Configuration 6 (hide)
AND |
|
Configuration 7 (hide)
AND |
|
Configuration 8 (hide)
AND |
|
Configuration 9 (hide)
AND |
|
Configuration 10 (hide)
AND |
|
Configuration 11 (hide)
AND |
|
Configuration 12 (hide)
AND |
|
History
No history.
Information
Published : 2022-03-29 15:15
Updated : 2024-05-21 04:15
NVD link : CVE-2022-1055
Mitre link : CVE-2022-1055
CVE.ORG link : CVE-2022-1055
JSON object : View
Products Affected
netapp
- h410s
- h500s
- h500e_firmware
- h300e
- h500e
- h500s_firmware
- h700e_firmware
- h410c_firmware
- h410s_firmware
- h700e
- h700s
- h300s_firmware
- h700s_firmware
- h300e_firmware
- h410c
- h300s
linux
- linux_kernel
fedoraproject
- fedora
canonical
- ubuntu_linux
redhat
- enterprise_linux
CWE
CWE-416
Use After Free