CVE-2018-14634
Not yet rated Exploited in the wild (KEV)
Confirmed active exploitation — CISA KEV catalog
- Name
- Linux Kernel Integer Overflow Vulnerability
- Added to catalog
- Remediation due date (US federal)
- Required action
- Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Description
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.
Metrics
- EPSS — exploit probability
- 15% (percentile: 97) as of 1 November 2026
- CWE
- CWE-190
Affected products
paloaltonetworks: pan-os; f5: big-ip access policy manager; f5: big-ip advanced firewall manager; f5: big-ip analytics; f5: big-ip application acceleration manager; f5: big-ip application security manager; f5: big-ip domain name system; f5: big-ip edge gateway; f5: big-ip fraud protection service; f5: big-ip global traffic manager; f5: big-ip link controller; f5: big-ip local traffic manager; f5: big-ip policy enforcement manager; f5: big-ip webaccelerator; f5: big-iq centralized management
References
- https://security.netapp.com/advisory/ntap-20190204-0002/ PatchThird Party Advisory
- https://security.netapp.com/advisory/ntap-20190204-0002/ PatchThird Party Advisory
- https://www.exploit-db.com/exploits/45516/ ExploitThird Party AdvisoryVDB Entry
- https://www.openwall.com/lists/oss-security/2018/09/25/4 ExploitMailing ListThird Party Advisory
- https://www.exploit-db.com/exploits/45516/ ExploitThird Party AdvisoryVDB Entry
- https://www.openwall.com/lists/oss-security/2018/09/25/4 ExploitMailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2021/07/20/2 Mailing ListThird Party Advisory
- http://www.securityfocus.com/bid/105407 Broken LinkThird Party AdvisoryVDB Entry
- https://access.redhat.com/errata/RHSA-2018:2748 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:2763 Third Party Advisory