CVE-2022-1055

🗓️ 29 Mar 2022 15:05:13Reported by GoogleType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 348 Views

A use-after-free exists in the Linux Kernel in tc_new_tfilter allowing privilege escalatio

Reporter	Title	Published	Views	Family All 348
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel and Golang Go might affect IBM Spectrum Copy Data Management	17 Jan 202316:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux Kernel may affect IBM Spectrum Protect Plus	16 Mar 202314:18	–	ibm
Tenable Nessus	Amazon Linux 2022 : bpftool, kernel, kernel-devel (ALAS2022-2022-039)	6 Sep 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2022 : bpftool, kernel, kernel-devel (ALAS2022-2022-185)	5 Nov 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2023-070)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2022-011 (ALASKERNEL-5.10-2022-011)	2 May 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.4-2022-024 (ALASKERNEL-5.4-2022-024)	2 May 202200:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0125: cloud-kernel bugfix, enhancement and (ALINUX3-SA-2022:0125)	14 May 202500:00	–	nessus
Tenable Nessus	AlmaLinux 9 : kernel-rt (ALSA-2022:6002)	16 Nov 202200:00	–	nessus
Tenable Nessus	AlmaLinux 9 : kernel (ALSA-2022:6003)	16 Nov 202200:00	–	nessus

NVD

Vulners

Vulnrichment

Node

linux linux_kernelRange5.1–5.17

linux linux_kernelMatch5.17-

linux linux_kernelMatch5.17rc1

linux linux_kernelMatch5.17rc2

Node

redhat enterprise_linuxMatch8.0

Node

fedoraproject fedoraMatch35

Node

canonical ubuntu_linuxMatch16.04esm

canonical ubuntu_linuxMatch18.04lts

canonical ubuntu_linuxMatch20.04lts

canonical ubuntu_linuxMatch21.10

canonical ubuntu_linuxMatch22.04lts

Node

netapp h300s_firmwareMatch-

AND

netapp h300sMatch-

Node

netapp h500s_firmwareMatch-

AND

netapp h500sMatch-

Node

netapp h700s_firmwareMatch-

AND

netapp h700sMatch-

Node

netapp h300e_firmwareMatch-

AND

netapp h300eMatch-

Node

netapp h500e_firmwareMatch-

AND

netapp h500eMatch-

Node

netapp h700e_firmwareMatch-

AND

netapp h700eMatch-

Node

netapp h410s_firmwareMatch-

AND

netapp h410sMatch-

Node

netapp h410c_firmwareMatch-

AND

netapp h410cMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "Kernel",
    "vendor": "Linux",
    "versions": [
      {
        "lessThan": "v5.17-rc3",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5",
        "versionType": "git"
      }
    ]
  }
]

Source	Link
kernel	www.kernel.dance/
packetstormsecurity	www.packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html
syzkaller	www.syzkaller.appspot.com/bug
security	www.security.netapp.com/advisory/ntap-20220506-0007/
git	www.git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/

21 Nov 2024 06:39Current

7.7High risk

Vulners AI Score7.7

CVSS 24.6

CVSS 3.17.8

CVSS 48.6

EPSS0.00023

SSVC

CWE-416