CISA KEV 정보
| 취약점명 | Linux Kernel Integer Overflow Vulnerability |
|---|---|
| 설명 | Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system. |
| 조치사항 | Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. |
| 랜섬웨어 캠페인 악용 | Unknown |
| CWE | CWE-190 |
| 등록일 (KEV) | 2026-01-26 |
| 조치 기한 | 2026-02-16 |
| 추가 참고 | This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/about/ ; https://www.kernel.org/ ; https://www.cve.org/CVERecord?id=CVE-2018-14634 ; https://access.redhat.com/errata/RHSA-2018:3540 ; https://nvd.nist.gov/vuln/detail/CVE-2018-14634 |
NVD 상세 정보
CVSS v3.0: 7.8 HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVSS v2.0: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C설명: An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.
CWE: CWE-190 | CWE-190
참조
- http://www.openwall.com/lists/oss-security/2021/07/20/2 [Mailing List, Third Party Advisory]
- http://www.securityfocus.com/bid/105407 [Third Party Advisory, VDB Entry, Broken Link]
- https://access.redhat.com/errata/RHSA-2018:2748 [Third Party Advisory]
- https://access.redhat.com/errata/RHSA-2018:2763 [Third Party Advisory]
- https://access.redhat.com/errata/RHSA-2018:2846 [Third Party Advisory]
- https://access.redhat.com/errata/RHSA-2018:2924 [Third Party Advisory]
- https://access.redhat.com/errata/RHSA-2018:2925 [Third Party Advisory]
- https://access.redhat.com/errata/RHSA-2018:2933 [Third Party Advisory]
- https://access.redhat.com/errata/RHSA-2018:3540 [Third Party Advisory]
- https://access.redhat.com/errata/RHSA-2018:3586 [Third Party Advisory]
- https://access.redhat.com/errata/RHSA-2018:3590 [Third Party Advisory]
- https://access.redhat.com/errata/RHSA-2018:3591 [Third Party Advisory]
- https://access.redhat.com/errata/RHSA-2018:3643 [Third Party Advisory]
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14634 [Issue Tracking, Third Party Advisory]
- https://security.netapp.com/advisory/ntap-20190204-0002/ [Patch, Third Party Advisory]
- ... 외 30건
This product uses the NVD API but is not endorsed or certified by the NVD.