CVE-2018-14634
Linux Kernel Integer Overflow Vulnerability
CVSS
—
Sem CVSS
EPSS
14.7%
p97
KEV
SIM
26 de jan. de 2026
Exploit Today
79
0-100
Publicado: — · Última mod.: —
Produto
Linux / Kernel
Vulnerabilidade
Linux Kernel Integer Overflow Vulnerability
Adicionado ao KEV
26 de jan. de 2026
Corrigir até
16 de fev. de 2026
Uso conhecido em ransomware
Não
Descrição resumida
Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system.
Ação necessária
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Notas
This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/about/ ; https://www.kernel.org/ ; https://www.cve.org/CVERecord?id=CVE-2018-14634 ; https://access.redhat.com/errata/RHSA-2018:3540 ; https://nvd.nist.gov/vuln/detail/CVE-2018-14634