CVE-2018-14634
The Linux Foundation kernel
Published 25 Sept 2018 · updated 17 Jun 2026 · Analyzed
7.8 High · CVSS 3.0, NVD
Exploited in the wild
CISA added this to its Known Exploited Vulnerabilities catalog on 26 Jan 2026, with a remediation deadline of 16 Feb 2026 for US federal agencies.
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Description
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.
References
- www.openwall.com/lists/oss-security/2021/07/20/2 · Mailing List, Third Party Advisory
- www.securityfocus.com/bid/105407 · Broken Link, Third Party Advisory, VDB Entry
- access.redhat.com/errata/RHSA-2018:2748 · Third Party Advisory
- access.redhat.com/errata/RHSA-2018:2763 · Third Party Advisory
- access.redhat.com/errata/RHSA-2018:2846 · Third Party Advisory
- access.redhat.com/errata/RHSA-2018:2924 · Third Party Advisory
- access.redhat.com/errata/RHSA-2018:2925 · Third Party Advisory
- access.redhat.com/errata/RHSA-2018:2933 · Third Party Advisory
- access.redhat.com/errata/RHSA-2018:3540 · Third Party Advisory
- access.redhat.com/errata/RHSA-2018:3586 · Third Party Advisory
- access.redhat.com/errata/RHSA-2018:3590 · Third Party Advisory
- access.redhat.com/errata/RHSA-2018:3591 · Third Party Advisory
- access.redhat.com/errata/RHSA-2018:3643 · Third Party Advisory
- bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14634 · Issue Tracking, Third Party Advisory
- security.netapp.com/advisory/ntap-20190204-0002/ · Patch, Third Party Advisory
- security.paloaltonetworks.com/CVE-2018-14634 · Third Party Advisory
- support.f5.com/csp/article/K20934447?utm_source=f5support&%3Butm_medium=RSS · Third Party Advisory
- usn.ubuntu.com/3775-1/ · Third Party Advisory
- usn.ubuntu.com/3775-2/ · Third Party Advisory
- usn.ubuntu.com/3779-1/ · Third Party Advisory
- www.exploit-db.com/exploits/45516/ · Exploit, Third Party Advisory, VDB Entry
- www.openwall.com/lists/oss-security/2018/09/25/4 · Exploit, Mailing List, Third Party Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-14634 · US Government Resource