CVE-2018-14634
Linux Kernel Integer Overflow Vulnerability
CVSS
—
Sin CVSS
EPSS
14.7%
p96
KEV
SÍ
26 ene 2026
Exploit Today
79
0-100
Publicado: — · Última mod.: —
Producto
Linux / Kernel
Vulnerabilidad
Linux Kernel Integer Overflow Vulnerability
Añadido a KEV
26 ene 2026
Remediar antes de
16 feb 2026
Uso conocido en ransomware
No
Descripción resumida
Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system.
Acción requerida
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Notas
This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/about/ ; https://www.kernel.org/ ; https://www.cve.org/CVERecord?id=CVE-2018-14634 ; https://access.redhat.com/errata/RHSA-2018:3540 ; https://nvd.nist.gov/vuln/detail/CVE-2018-14634