CVEvulnerability

CVE-2018-14634

7.8 HIGH Known exploited Published 2018-09-25 Modified 2026-06-17 Official page ↗

CISA Known Exploited Vulnerability

Linux Kernel Integer Overflow Vulnerability — Linux Kernel

Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system.

Added to KEV: 2026-01-26
Remediation due: 2026-02-16
Ransomware use: Unknown
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/about/ ; https://www.kernel.org/ ; https://www.cve.org/CVERecord?id=CVE-2018-14634 ; https://access.redhat.com/errata/RHSA-2018:3540 ; https://nvd.nist.gov/vuln/detail/CVE-2018-14634

Status: Analyzed
Published: 2018-09-25
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.0 ([email protected]): 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0 ([email protected]): 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses: CWE-190

Description

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.

Affected configurations

• paloaltonetworks pan-os (>= 7.1.0 < 7.1.23) • paloaltonetworks pan-os (>= 8.0.0 < 8.0.16) • paloaltonetworks pan-os (>= 8.1.0 < 8.1.7) • f5 big-ip access policy manager (>= 11.2.1 < 11.6.4) • f5 big-ip access policy manager (>= 12.1.0 < 12.1.5) • f5 big-ip access policy manager (>= 13.0.0 < 13.1.1.5) • f5 big-ip access policy manager (>= 14.0.0 < 14.0.1.1) • f5 big-ip access policy manager (>= 14.1.0 < 14.1.0.6) • f5 big-ip advanced firewall manager (>= 11.2.1 < 11.6.4) • f5 big-ip advanced firewall manager (>= 12.1.0 < 12.1.5) • f5 big-ip advanced firewall manager (>= 13.0.0 < 13.1.1.5) • f5 big-ip advanced firewall manager (>= 14.0.0 < 14.0.1.1) • f5 big-ip advanced firewall manager (>= 14.1.0 < 14.1.0.6) • f5 big-ip analytics (>= 11.2.1 < 11.6.4) • f5 big-ip analytics (>= 12.1.0 < 12.1.5) • f5 big-ip analytics (>= 13.0.0 < 13.1.1.5) • f5 big-ip analytics (>= 14.0.0 < 14.0.1.1) • f5 big-ip analytics (>= 14.1.0 < 14.1.0.6) • f5 big-ip application acceleration manager (>= 11.2.1 < 11.6.4) • f5 big-ip application acceleration manager (>= 12.1.0 < 12.1.5) • f5 big-ip application acceleration manager (>= 13.0.0 < 13.1.1.5) • f5 big-ip application acceleration manager (>= 14.0.0 < 14.0.1.1) • f5 big-ip application acceleration manager (>= 14.1.0 < 14.1.0.6) • f5 big-ip application security manager (>= 11.2.1 < 11.6.4) • f5 big-ip application security manager (>= 12.1.0 < 12.1.5) • f5 big-ip application security manager (>= 13.0.0 < 13.1.1.5) • f5 big-ip application security manager (>= 14.0.0 < 14.0.1.1) • f5 big-ip application security manager (>= 14.1.0 < 14.1.0.6) • f5 big-ip domain name system (>= 11.2.1 < 11.6.4) • f5 big-ip domain name system (>= 12.1.0 < 12.1.5) • f5 big-ip domain name system (>= 13.0.0 < 13.1.1.5) • f5 big-ip domain name system (>= 14.0.0 < 14.0.1.1) • f5 big-ip domain name system (>= 14.1.0 < 14.1.0.6) • f5 big-ip edge gateway (>= 11.2.1 < 11.6.4) • f5 big-ip edge gateway (>= 12.1.0 < 12.1.5) • f5 big-ip edge gateway (>= 13.0.0 < 13.1.1.5) • f5 big-ip edge gateway (>= 14.0.0 < 14.0.1.1) • f5 big-ip edge gateway (>= 14.1.0 < 14.1.0.6) • f5 big-ip fraud protection service (>= 11.2.1 < 11.6.4) • f5 big-ip fraud protection service (>= 12.1.0 < 12.1.5) • f5 big-ip fraud protection service (>= 13.0.0 < 13.1.1.5) • f5 big-ip fraud protection service (>= 14.0.0 < 14.0.1.1) • f5 big-ip fraud protection service (>= 14.1.0 < 14.1.0.6) • f5 big-ip global traffic manager (>= 11.2.1 < 11.6.4) • f5 big-ip global traffic manager (>= 12.1.0 < 12.1.5) • f5 big-ip global traffic manager (>= 13.0.0 < 13.1.1.5) • f5 big-ip global traffic manager (>= 14.0.0 < 14.0.1.1) • f5 big-ip global traffic manager (>= 14.1.0 < 14.1.0.6) • f5 big-ip link controller (>= 11.2.1 < 11.6.4) • f5 big-ip link controller (>= 12.1.0 < 12.1.5) • f5 big-ip link controller (>= 13.0.0 < 13.1.1.5) • f5 big-ip link controller (>= 14.0.0 < 14.0.1.1) • f5 big-ip link controller (>= 14.1.0 < 14.1.0.6) • f5 big-ip local traffic manager (>= 11.2.1 < 11.6.4) • f5 big-ip local traffic manager (>= 12.1.0 < 12.1.5) • f5 big-ip local traffic manager (>= 13.0.0 < 13.1.1.5) • f5 big-ip local traffic manager (>= 14.0.0 < 14.0.1.1) • f5 big-ip local traffic manager (>= 14.1.0 < 14.1.0.6) • f5 big-ip policy enforcement manager (>= 11.2.1 < 11.6.4) • f5 big-ip policy enforcement manager (>= 12.1.0 < 12.1.5) … and 37 more

Weakness · CWE (1)

CWE-190 Integer Overflow or Wraparound weakness

References