A critical integer overflow vulnerability in the Linux kernel, known as Mutagen Astronomy, is currently being actively exploited in the wild to achieve local privilege escalation.

This is an integer overflow flaw within the create_elf_tables function of the Linux kernel. An unprivileged local user who can execute a SUID or otherwise privileged binary can leverage this flaw to elevate their privileges to root on 64-bit systems.

Successful exploitation of this vulnerability allows a local attacker to gain full administrative control over the affected system. Given the CVSS score of 9.5, this represents a critical risk to data confidentiality, integrity, and system availability. The potential for complete system compromise necessitates immediate patching, as the vulnerability is confirmed to be under active exploitation by malicious actors.

Immediate Action: Apply the specific kernel security updates provided by your distribution vendor, such as Red Hat errata RHSA-2018:2763 or RHSA-2018:3643, or Ubuntu Security Notices USN-3775-1 and USN-3779-1.

Proactive Monitoring: Monitor system logs for unexpected privilege escalation attempts or unusual crashes associated with SUID binaries.

Compensating Controls: While full patching is required, restricting user access to SUID binaries and monitoring system memory usage may provide limited defense. Note that systems with less than 32GB of RAM are theoretically less susceptible to the specific memory demands of this exploit, but this should not be relied upon as a primary security measure.

Public Exploit Available: Yes, a public exploit is available via ExploitDB (EDB-ID 45516) and GitHub.

Due to the confirmed active exploitation and the critical nature of kernel-level privilege escalation, this vulnerability must be treated as a top-priority remediation item. Organizations should audit their infrastructure to identify all systems running the affected Linux kernel versions and deploy the vendor-supplied patches immediately to prevent unauthorized root-level access.