$ cve CVE-2018-14634 JSON

CVE-2018-14634 KEV EXPLOIT

7.8

HIGH · CVSS 3.0 · EPSS 14.7% (pctl 97)

Patch first

On CISA KEV — known exploited in the wild, due 2026-02-16.

Description

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.

Scoring

CVSS	7.8 (HIGH, v3.0)
Vector	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS	14.69% — more likely to be exploited than 97% of all CVEs
Weakness	CWE-190
On CISA KEV	yes — remediate by 2026-02-16
Public exploit	yes
Published	2018-09-25
Last modified	2026-06-17

CISA KEV

Name	Linux Kernel Integer Overflow Vulnerability
Added	2026-01-26
Due	2026-02-16
Vendor / product	Linux / Kernel
Ransomware use	none reported

Affected (28)

Vendor	Product
canonical	ubuntu linux
f5	big-ip access policy manager
f5	big-ip advanced firewall manager
f5	big-ip analytics
f5	big-ip application acceleration manager
f5	big-ip application security manager
f5	big-ip domain name system
f5	big-ip edge gateway
f5	big-ip fraud protection service
f5	big-ip global traffic manager
f5	big-ip link controller
f5	big-ip local traffic manager
f5	big-ip policy enforcement manager
f5	big-ip webaccelerator
f5	big-iq centralized management
f5	big-iq cloud and orchestration
f5	enterprise manager
f5	iworkflow
f5	traffix signaling delivery controller
linux	linux kernel
netapp	snapprotect
paloaltonetworks	pan-os
redhat	enterprise linux desktop
redhat	enterprise linux server
redhat	enterprise linux server aus
redhat	enterprise linux server eus
redhat	enterprise linux server tus
redhat	enterprise linux workstation

Public exploits

Source	Title	Date
exploit-db	Linux Kernel 2.6.x / 3.10.x / 4.14.x (RedHat / Debian / CentOS) (x64) - 'Mutagen Astronomy' Local Privilege Escalation	2018-09-26

References

→ the Explorer · watch your stack · NVD