# CVE-2018-14634

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.

- Page: https://www.vulneraibility.com/cve/CVE-2018-14634
- CVSS: 7.8
- Known exploited: yes, in CISA KEV since 2026-01-26; CISA due date 2026-02-16
- EPSS: 14.69%
- Public exploit code: 1 on Exploit-DB · 1 GitHub proof of concept (first 2018-09-26)
- CISA SSVC: exploitation active, automatable no, technical impact total (assessed 2026-01-27)
- Weakness: CWE-190
- Published: 2018-09-25

## Affected versions

- The Linux Foundation kernel: affected 2.6.x, 3.10.x, 4.14.x

A version outside these ranges is not a statement that it is unaffected.

## References

- [advisory] https://access.redhat.com/errata/RHSA-2018:3540
- [other] https://security.netapp.com/advisory/ntap-20190204-0002/
- [advisory] https://access.redhat.com/errata/RHSA-2018:2925
- [advisory] https://access.redhat.com/errata/RHSA-2018:3591
- [exploit] https://www.exploit-db.com/exploits/45516/
- [advisory] https://usn.ubuntu.com/3775-1/
- [advisory] https://access.redhat.com/errata/RHSA-2018:2933
- [advisory] https://usn.ubuntu.com/3779-1/
- [advisory] https://access.redhat.com/errata/RHSA-2018:2748
- [advisory] https://access.redhat.com/errata/RHSA-2018:3590
- [advisory] https://usn.ubuntu.com/3775-2/
- [advisory] https://access.redhat.com/errata/RHSA-2018:2763
- [other] http://www.securityfocus.com/bid/105407
- [advisory] https://access.redhat.com/errata/RHSA-2018:2924
- [advisory] https://access.redhat.com/errata/RHSA-2018:3586
- [advisory] https://access.redhat.com/errata/RHSA-2018:3643
- [advisory] https://access.redhat.com/errata/RHSA-2018:2846
- [other] https://www.openwall.com/lists/oss-security/2018/09/25/4
- [other] https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14634
- [other] https://support.f5.com/csp/article/K20934447?utm_source=f5support&amp%3Butm_medium=RSS
- [other] https://security.paloaltonetworks.com/CVE-2018-14634
- [other] http://www.openwall.com/lists/oss-security/2021/07/20/2
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-14634

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.