Linux · Kernel
CVE-2018-14634
Linux Kernel Integer Overflow Vulnerability
O que é
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.
CISA: Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system.
O que fazer
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Prazo para as agências federais dos EUA: 16 de fevereiro de 2026
- Adicionada à lista da CISA
- 26 de janeiro de 2026
- Publicada
- 25 de setembro de 2018
- Gravidade
- Alto 7,8 CVSS 3.0
- Chance de ataques nos próximos 30 dias (EPSS)
- 15% entre os 3,4% mais altos de todas as vulnerabilidades conhecidas
- Fraqueza
- CWE-190
- Mais detalhes
- NVD · CVE.org · CISA
Todas as referências (20)
- https://access.redhat.com/errata/RHSA-2018:3540
- https://access.redhat.com/errata/RHSA-2018:2925
- https://access.redhat.com/errata/RHSA-2018:3591
- https://usn.ubuntu.com/3775-1/
- https://access.redhat.com/errata/RHSA-2018:2933
- https://usn.ubuntu.com/3779-1/
- https://access.redhat.com/errata/RHSA-2018:2748
- https://access.redhat.com/errata/RHSA-2018:3590
- https://usn.ubuntu.com/3775-2/
- https://access.redhat.com/errata/RHSA-2018:2763
- https://access.redhat.com/errata/RHSA-2018:2924
- https://access.redhat.com/errata/RHSA-2018:3586
- https://access.redhat.com/errata/RHSA-2018:3643
- https://access.redhat.com/errata/RHSA-2018:2846
- https://security.netapp.com/advisory/ntap-20190204-0002/
- https://www.exploit-db.com/exploits/45516/
- http://www.securityfocus.com/bid/105407
- https://www.openwall.com/lists/oss-security/2018/09/25/4
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14634
- https://support.f5.com/csp/article/K20934447?utm_source=f5support&%3Butm_medium=RSS
Mais falhas exploradas de Linux
| Adicionado | Vulnerabilidade | Produto | Gravidade | Chance de ataque |
|---|---|---|---|---|
| 18 de set. de 2026 | Improper Check for Unusual or Exceptional Conditions | Kernel | Crítica 9,8 | 3,3% |
| 18 de set. de 2026 | Race Condition | Kernel | Alto 7,8 | 1,6% |
| 18 de set. de 2026 | Out-of-Bounds Write | Kernel | Alto 8,8 | 0,9% |
| 27 de ago. de 2026 | Unspecified | Kernel | Alto 7,8 | 0,7% |
| 26 de ago. de 2026 | Out-of-Bounds Write | Kernel | Alto 7,8 | 8,9% |
| 2 de jun. de 2026 | Improper Authentication | Kernel | Alto 7,8 | 5,5% |
| 1 de mai. de 2026 | Incorrect Resource Transfer Between Spheres | Kernel | Alto 7,8 | 98% |
| 6 de out. de 2025 | Heap Out-of-Bounds Write | Kernel | Alto 8,3 | 79% |
Fontes: Known Exploited Vulnerabilities (CISA, domínio público), CVE records (cve.org) e EPSS (FIRST). A chance de ataque é a estimativa EPSS de que alguém tente explorar a falha nos próximos 30 dias.