A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5
{
"cna_assigner": "Google",
"cwe_ids": [
"CWE-416"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/1xxx/CVE-2022-1055.json",
"unresolved_ranges": [
{
"extracted_events": [
{
"range": [
{
"introduced": "5.1.0"
},
{
"fixed": "5.4.177"
},
{
"introduced": "5.5.0"
},
{
"fixed": "5.10.97"
},
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.20"
},
{
"introduced": "5.16.0"
},
{
"fixed": "5.16.6"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandardRange"
}
]
}
]
}{
"extracted_events": [
{
"range": [
{
"fixed": "04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5"
}
],
"source": "REFERENCES_COMMIT"
}
]
}