Description
A use-after-free exists in the Linux Kernel in tc_new_tfilter that could allow a local attacker to gain privilege escalation. The exploit requires unprivileged user namespaces. We recommend upgrading past commit 04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Kernel
Default version status: unaffected
5.1.0 to < 5.4.177affected5.5.0 to < 5.10.97affected5.11.0 to < 5.15.20affected5.16.0 to < 5.16.6affected5.17.0unaffected04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5unaffected
References
- https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5 ↗
- https://syzkaller.appspot.com/bug?id=2212474c958978ab86525fe6832ac8102c309ffc ↗
- https://kernel.dance/#04c2a47ffb13c29778e2a14e414ad4cb5a5db4b5 ↗
- https://security.netapp.com/advisory/ntap-20220506-0007/ ↗
- http://packetstormsecurity.com/files/167386/Kernel-Live-Patch-Security-Notice-LSN-0086-1.html ↗