NewsExploited · CISA KEVLinux · Kernel
Linux Kernel Integer Overflow Vulnerability
CVE-2018-14634
Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system.
CISA's required action · due for U.S. federal civilian agencies
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Cited by CISA: git.kernel.org · kernel.org · cve.org · access.redhat.com +1 more at the source
Added to KEV · Source checked · CISA KEV entry
Loading voting…