CVE-2022-1055: Use after Free in tc_new_tfilter allowing for privilege escalation in Linux Kernel
Vulnerability summary
CVE-2022-1055 is a high (CVSS 8.6) Use After Free vulnerability in canonical ubuntu_linux. EPSS estimates a 0.50% chance of exploitation in the next 30 days, higher than 43.1% of scored vulnerabilities. 2 public exploits are recorded.
Public exploit (reference, Date unknown)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 18 · Related 12Timeline
- 29-03-2022PublishedVulnerability first disclosed.
- 29-07-2026Last modifiedVulnerability information updated.
Description
A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5
CVSS metrics
7 scores · 4 sources · 3 versions- OSV · UbuntuEcosystem advisory · calculated8.6HighCVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
- NVDNIST8.6HighCVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.50%
Chance of exploitation in the next 30 days
Percentile
43%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.50% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
2 foundExploit Reference (syzkaller.appspot.com)
Maturity: unknown
Exploit Reference (kernel.dance)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu64 products
- linux< 5.4.0-107.121
- linux-aws< 5.4.0-1071.76
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
- linux-aws-5.13< 5.13.0-1021.23~20.04.2
Linux2 products
- kernel≥ 5.1.0, < 5.4.177 | ≥ 5.5.0, < 5.10.97 | ≥ 5.11.0, < 5.15.20 | ≥ 5.16.0, < 5.16.6
- linux_kernel≥ 5.1, < 5.4.177 | ≥ 5.5, < 5.10.97 | ≥ 5.11, < 5.15.20 | ≥ 5.16, < 5.16.6
Canonical1 product
- ubuntu_linuxEOL16.04 | 18.04 | 20.04 | 21.10 | 22.04
Debian1 product
- linux< 5.16.7-1
Fedoraproject1 product
- fedoraEOL35
Redhat1 product
7 vendors · 78 products
References
13 links- syzkaller.appspot.com/bug?id=2212474c958978ab86525fe6832ac8102c309ffcX Refsource MISCREPORTExploitPatchThird Party Advisory
- packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.htmlX Refsource MISCThird Party AdvisoryVDB Entry
