CVE-2018-14634
KEVLinux Kernel Integer Overflow Vulnerability
Description
Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system.
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.
CVSS 3.0 vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HPublishedSep 25, 2018
Last modifiedJun 17, 2026
Added to KEVJan 26, 2026
Remediation dueFeb 16, 2026
References
- openwall.com/lists/oss-security/2021/07/20/2Mailing ListThird Party Advisory
- securityfocus.com/bid/105407Broken LinkThird Party Advisory
- access.redhat.com/errata/RHSA-2018:2748Third Party Advisory
- access.redhat.com/errata/RHSA-2018:2763Third Party Advisory
- access.redhat.com/errata/RHSA-2018:2846Third Party Advisory
- access.redhat.com/errata/RHSA-2018:2924Third Party Advisory
- access.redhat.com/errata/RHSA-2018:2925Third Party Advisory
- access.redhat.com/errata/RHSA-2018:2933Third Party Advisory
- access.redhat.com/errata/RHSA-2018:3540Third Party Advisory
- access.redhat.com/errata/RHSA-2018:3586Third Party Advisory
- access.redhat.com/errata/RHSA-2018:3590Third Party Advisory
- access.redhat.com/errata/RHSA-2018:3591Third Party Advisory
0 recent articles mention this CVE
70
Risk assessment · High
Actively exploited. Patch immediately.
- Exploitation
- Confirmed in the wild (CISA KEV)
- Federal remediation deadline
- Overdue by 252 days
- CVSS
- 7.8 HIGH
- EPSS (30-day exploit probability)
- 14.7% · top 3% of all CVEs
- Weakness
- CWE-190
Recommended actions
- 1.Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- 2.Treat as emergency change: patch or isolate internet-facing instances first.
- 3.Hunt for compromise: review logs for the disclosure window, not just from the patch date.
Assessment is derived automatically from the live signals above; verify against your own asset inventory.