CVE-2022-1055

Aliases:UBUNTU-CVE-2022-1055DEBIAN-CVE-2022-1055

Advisory lineage Upstream: 0 Downstream: 20

Downstream

DEBIAN-CVE-2022-1055 LSN-0086-1 RHSA-2022:6002 RHSA-2022:6003 RHSA-2022:7444 RHSA-2022:7683

Analyzed

Published: 29 Mar 2022, 15:05

Last modified:29 Jul 2026, 13:49

Vulnerability Summary

Overall Risk (default)

medium

45/100

CVSS Score

8.6 HIGH

v4.0 (cve.org)

EPSS Score

0.5% LOW

1% probability +0.47%

KEV

Not listed

Ransomware

No reports

Public exploits

2 found

Dark Web

Not detected

Timeline

29 Mar 2022, 15:05

Published

Vulnerability first disclosed

29 Jul 2026, 13:49

Last Modified

Vulnerability information updated

Description

A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5

CVSS Metrics

v4.0•HIGH•Score: 8.6CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N
v4.0•HIGH•Score: 8.6CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
v2.0•MEDIUM•Score: 4.6AV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 0.50%• Percentile: 42%

Techniques & Countermeasures

CWE-416•Use After Free
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.

Affected Systems

canonical•ubuntu_linux
16.04 | 18.04 | 20.04 | 21.10 | 22.04
debian•linux
< 5.10.103-1 | < 5.16.7-1 | < 5.16.7-1 | < 5.16.7-1
ubuntu•linux
< 5.4.0-107.121
ubuntu•linux-aws
< 5.4.0-1071.76
ubuntu•linux-aws-5.0
all
ubuntu•linux-aws-5.11
all
ubuntu•linux-aws-5.13
< 5.13.0-1021.23~20.04.2
ubuntu•linux-aws-5.3
all
ubuntu•linux-aws-5.4
< 5.4.0-1071.76~18.04.1
ubuntu•linux-aws-5.8
all
ubuntu•linux-aws-fips
< 5.4.0-1071.76+fips1 | all
ubuntu•linux-azure
all | < 5.4.0-1074.77
ubuntu•linux-azure-5.11
all
ubuntu•linux-azure-5.13
< 5.13.0-1021.24~20.04.1
ubuntu•linux-azure-5.3
all
ubuntu•linux-azure-5.4
< 5.4.0-1074.77~18.04.1
ubuntu•linux-azure-5.8
all
ubuntu•linux-azure-edge
all
ubuntu•linux-azure-fips
< 5.4.0-1074.77+fips1 | all
ubuntu•linux-bluefield
all | < 5.4.0-1032.35
ubuntu•linux-fips
< 5.4.0-1047.53 | all
ubuntu•linux-gcp
all | < 5.4.0-1069.73
ubuntu•linux-gcp-5.11
all
ubuntu•linux-gcp-5.13
< 5.13.0-1023.28~20.04.1
ubuntu•linux-gcp-5.3
all
ubuntu•linux-gcp-5.4
< 5.4.0-1069.73~18.04.1
ubuntu•linux-gcp-5.8
all
ubuntu•linux-gcp-fips
< 5.4.0-1069.73+fips2 | all
ubuntu•linux-gke
< 5.4.0-1067.70
ubuntu•linux-gke-4.15
all
ubuntu•linux-gke-5.4
< 5.4.0-1067.70~18.04.1
ubuntu•linux-gkeop
< 5.4.0-1038.39
ubuntu•linux-gkeop-5.4
< 5.4.0-1038.39~18.04.1
ubuntu•linux-hwe
all
ubuntu•linux-hwe-5.11
all
ubuntu•linux-hwe-5.13
< 5.13.0-39.44~20.04.1
ubuntu•linux-hwe-5.4
< 5.4.0-107.121~18.04.1
ubuntu•linux-hwe-5.8
all
ubuntu•linux-hwe-edge
all | all
ubuntu•linux-ibm
< 5.4.0-1019.21
ubuntu•linux-ibm-5.4
< 5.4.0-1019.21~18.04.1
ubuntu•linux-intel-5.13
all
ubuntu•linux-intel-iot-realtime
all
ubuntu•linux-intel-iotg-5.15
< 5.15.0-1008.11~20.04.1
ubuntu•linux-iot
< 5.4.0-1004.6
ubuntu•linux-kvm
< 5.4.0-1061.64
ubuntu•linux-oem
all
ubuntu•linux-oem-5.10
all
ubuntu•linux-oem-5.13
all
ubuntu•linux-oem-5.14
< 5.14.0-1027.30

Showing first 50 affected entries in server-rendered view.