Linux Kernel Integer Overflow Vulnerability - CVE-2018-14634
Affected Systems:
Linux Kernal
Executive Summary
Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system.
CVSS Score: 9.0/10.0
Severity: CRITICAL
Affected Systems
- Linux Kernal
Detection & Mitigation
- Apply vendor patches as soon as available
- Monitor for indicators of compromise
- Review vendor advisories for specific guidance