Actively exploited · Published Sep 25, 2018 · Assigned by redhat

CVE-2018-14634

High 7.8 Exploited

In plain English

A high-severity integer overflow in kernel from The Linux Foundation. Attackers are actively exploiting it in the wild (listed by CISA on January 26, 2026). The chance it is exploited in the next 30 days is estimated at 14.7% (higher than 97% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.0)7.8High

Exploit odds (30 days)14.7%top 3.3% of all CVEs

Exploited in the wildYesCISA KEV since Jan 26, 2026

Attack tooling1Public PoC

CISA guidance

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Federal agencies must remediate by Feb 16, 2026.

Official description

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Debian:12	linux	4.12.6-1	DEBIAN-CVE-2018-14634
Debian:13	linux	4.12.6-1	DEBIAN-CVE-2018-14634
Debian:14	linux	4.12.6-1	DEBIAN-CVE-2018-14634
Ubuntu:22.04:LTS	linux-intel-iot-realtime	no fix listed	UBUNTU-CVE-2018-14634
Ubuntu:24.04:LTS	linux-raspi-realtime	no fix listed	UBUNTU-CVE-2018-14634
Ubuntu:22.04:LTS	linux-realtime	no fix listed	UBUNTU-CVE-2018-14634
Ubuntu:22.04:LTS	linux-riscv	no fix listed	UBUNTU-CVE-2018-14634

Affected products (as reported)

Vendor	Product	Versions
The Linux Foundation	kernel	2.6.x, 3.10.x, 4.14.x

Weakness: CWE-190 · Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

RHSA-2018:3540 vendor-advisory, x_refsource_REDHAT
https://security.netapp.com/advisory/ntap-20190204-0002/ x_refsource_CONFIRM
RHSA-2018:2925 vendor-advisory, x_refsource_REDHAT
RHSA-2018:3591 vendor-advisory, x_refsource_REDHAT
45516 exploit, x_refsource_EXPLOIT-DB
USN-3775-1 vendor-advisory, x_refsource_UBUNTU
RHSA-2018:2933 vendor-advisory, x_refsource_REDHAT
USN-3779-1 vendor-advisory, x_refsource_UBUNTU
RHSA-2018:2748 vendor-advisory, x_refsource_REDHAT
RHSA-2018:3590 vendor-advisory, x_refsource_REDHAT
USN-3775-2 vendor-advisory, x_refsource_UBUNTU
RHSA-2018:2763 vendor-advisory, x_refsource_REDHAT
105407 vdb-entry, x_refsource_BID
RHSA-2018:2924 vendor-advisory, x_refsource_REDHAT
RHSA-2018:3586 vendor-advisory, x_refsource_REDHAT
RHSA-2018:3643 vendor-advisory, x_refsource_REDHAT
RHSA-2018:2846 vendor-advisory, x_refsource_REDHAT
[oss-security] 20180925 Integer overflow in Linux's create_elf_tables() (CVE-2018-14634) mailing-list, x_refsource_MLIST
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14634 x_refsource_CONFIRM
https://support.f5.com/csp/article/K20934447?utm_source=f5support&amp%3Butm_medium=RSS x_refsource_CONFIRM
https://security.paloaltonetworks.com/CVE-2018-14634 x_refsource_CONFIRM
[oss-security] 20210720 CVE-2021-33910: Denial of service (stack exhaustion) in systemd (PID 1) mailing-list, x_refsource_MLIST
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-14634 government-resource