Linux · Kernel
CVE-2018-14634
Linux Kernel Integer Overflow Vulnerability
Nedir
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.
CISA: Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system.
Ne yapmalı
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
ABD federal kurumları için son tarih: 16 Şubat 2026
- CISA listesine eklenme
- 26 Ocak 2026
- Yayımlanma
- 25 Eylül 2018
- Önem
- Yüksek 7,8 CVSS 3.0
- Önümüzdeki 30 günde saldırı olasılığı (EPSS)
- 15% bilinen tüm açıkların en üstteki 3,4% diliminde
- Zayıflık
- CWE-190
- Daha fazla ayrıntı
- NVD · CVE.org · CISA
Tüm kaynaklar (20)
- https://access.redhat.com/errata/RHSA-2018:3540
- https://access.redhat.com/errata/RHSA-2018:2925
- https://access.redhat.com/errata/RHSA-2018:3591
- https://usn.ubuntu.com/3775-1/
- https://access.redhat.com/errata/RHSA-2018:2933
- https://usn.ubuntu.com/3779-1/
- https://access.redhat.com/errata/RHSA-2018:2748
- https://access.redhat.com/errata/RHSA-2018:3590
- https://usn.ubuntu.com/3775-2/
- https://access.redhat.com/errata/RHSA-2018:2763
- https://access.redhat.com/errata/RHSA-2018:2924
- https://access.redhat.com/errata/RHSA-2018:3586
- https://access.redhat.com/errata/RHSA-2018:3643
- https://access.redhat.com/errata/RHSA-2018:2846
- https://security.netapp.com/advisory/ntap-20190204-0002/
- https://www.exploit-db.com/exploits/45516/
- http://www.securityfocus.com/bid/105407
- https://www.openwall.com/lists/oss-security/2018/09/25/4
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14634
- https://support.f5.com/csp/article/K20934447?utm_source=f5support&%3Butm_medium=RSS
Linux için istismar edilen diğer açıklar
| Eklenme | Açık | Ürün | Önem | Saldırı olasılığı |
|---|---|---|---|---|
| 18 Eyl 2026 | Improper Check for Unusual or Exceptional Conditions | Kernel | Kritik 9,8 | 3,3% |
| 18 Eyl 2026 | Race Condition | Kernel | Yüksek 7,8 | 1,6% |
| 18 Eyl 2026 | Out-of-Bounds Write | Kernel | Yüksek 8,8 | 0,9% |
| 27 Ağu 2026 | Unspecified | Kernel | Yüksek 7,8 | 0,7% |
| 26 Ağu 2026 | Out-of-Bounds Write | Kernel | Yüksek 7,8 | 8,9% |
| 2 Haz 2026 | Improper Authentication | Kernel | Yüksek 7,8 | 5,5% |
| 1 May 2026 | Incorrect Resource Transfer Between Spheres | Kernel | Yüksek 7,8 | 98% |
| 6 Eki 2025 | Heap Out-of-Bounds Write | Kernel | Yüksek 8,3 | 79% |
Kaynaklar: Known Exploited Vulnerabilities (CISA, kamu malı), CVE records (cve.org) ve EPSS (FIRST). Saldırı olasılığı, birinin önümüzdeki 30 günde açığı istismar etmeye çalışacağına dair EPSS tahminidir.