CVE-2018-14634: Linux Kernel Integer Overflow Vulnerability

KEV

Analyzed

AliasesRHSA-2018:2748RHSA-2018:2763RHSA-2018:3643+2 more

Published 25-09-2018Last modified 27-01-2026

Vulnerability summary

CVE-2018-14634 is a high (CVSS 7.8) Integer Overflow or Wraparound vulnerability in Linux Kernel. It is known to be exploited: CISA lists it, first on 26-01-2026. EPSS estimates a 14.69% chance of exploitation in the next 30 days, higher than 96.6% of scored vulnerabilities. 2 public exploits are recorded.

Priority

Act nowlisted as exploited

Listed as exploited by CISA (26-01-2026)

Source freshness unavailable

How is this decided?

CVSS score

7.8/10

010

High · v3.0 (CVE.org)

EPSS score

14.69%

0%100%

Medium · 0.00 pp in 30 days

KEVExploited in the wildCritical · listed in 1 catalog

RansomwareNot flaggedNo ransomware use recorded.

Public exploits2reference, exploit-database

Advisory lineage

Upstream 0 · Downstream 18 · Duplicates 1 · Related 9

DLA-1529-1 RHSA-2018:2846 RHSA-2018:2924 RHSA-2018:2925 RHSA-2018:2933 RHSA-2018:3540+13 more

Timeline

25-09-2018
PublishedVulnerability first disclosed.
26-01-2026
Added to CISA KEVExploitedLinux Kernel Integer Overflow Vulnerability
27-01-2026
Last modifiedVulnerability information updated.
16-02-2026
CISA remediation dueDeadline passedApply mitigations per vendor instructions.

Description

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.

CVSS metrics

6 scores · 5 sources · 2 versions

v3.07.8v2.07.2

EPSS trend

Probability

14.69%

Chance of exploitation in the next 30 days

Percentile

97%

Versus all other CVEs

30-day change

No change 0.00 pp

From 14.69% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEVListed

Added: 26-01-2026
Federal due date: 16-02-2026

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

CISA required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. www.kernel.org www.cve.org/CVERecord?id=CVE-2018-14634 access.redhat.com/errata/RHSA-2018:3540 nvd.nist.gov/vuln/detail/CVE-2018-14634

Public exploits

2 found

referenceUnverified
Exploit Reference (openwall.com)
Maturity: unknown
exploit-databaselocallinux_x86-64Unverified
Linux Kernel 2.6.x / 3.10.x / 4.14.x (RedHat / Debian / CentOS) (x64) - 'Mutagen Astronomy' Local Privilege Escalation
Maturity: poc

Weaknesses

CWE · root cause

CWE-190Integer Overflow or WraparoundThe product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Redhat49 products

enterprise_linux_desktop6.0 | 7.0
enterprise_linux_server6.0 | 7.0
enterprise_linux_server_aus6.5 | 6.6 | 7.6
enterprise_linux_server_eus6.7 | 7.5 | 7.6
enterprise_linux_server_tus6.6 | 7.6

enterprise_linux_workstation6.0 | 7.0
kernel< 0:3.10.0-862.14.4.el7 | < 0:2.6.32-358.94.1.el6
kernel-abi-whitelists< 0:3.10.0-862.14.4.el7
kernel-bootwrapper< 0:3.10.0-862.14.4.el7
kernel-debug< 0:3.10.0-862.14.4.el7 | < 0:2.6.32-358.94.1.el6
kernel-debug-debuginfo< 0:3.10.0-862.14.4.el7 | < 0:2.6.32-358.94.1.el6
kernel-debug-devel< 0:3.10.0-862.14.4.el7 | < 0:2.6.32-358.94.1.el6
kernel-debuginfo< 0:3.10.0-862.14.4.el7 | < 0:2.6.32-358.94.1.el6
kernel-debuginfo-common-ppc64< 0:3.10.0-862.14.4.el7
kernel-debuginfo-common-ppc64le< 0:3.10.0-862.14.4.el7
kernel-debuginfo-common-s390x< 0:3.10.0-862.14.4.el7
kernel-debuginfo-common-x86_64< 0:3.10.0-862.14.4.el7 | < 0:2.6.32-358.94.1.el6
kernel-devel< 0:3.10.0-862.14.4.el7 | < 0:2.6.32-358.94.1.el6
kernel-doc< 0:3.10.0-862.14.4.el7 | < 0:2.6.32-358.94.1.el6
kernel-firmware< 0:2.6.32-358.94.1.el6
kernel-headers< 0:3.10.0-862.14.4.el7 | < 0:2.6.32-358.94.1.el6
kernel-kdump< 0:3.10.0-862.14.4.el7
kernel-kdump-debuginfo< 0:3.10.0-862.14.4.el7
kernel-kdump-devel< 0:3.10.0-862.14.4.el7
kernel-rt< 0:3.10.0-862.14.4.rt56.821.el7
kernel-rt-debug< 0:3.10.0-862.14.4.rt56.821.el7
kernel-rt-debug-debuginfo< 0:3.10.0-862.14.4.rt56.821.el7
kernel-rt-debug-devel< 0:3.10.0-862.14.4.rt56.821.el7
kernel-rt-debug-kvm< 0:3.10.0-862.14.4.rt56.821.el7
kernel-rt-debug-kvm-debuginfo< 0:3.10.0-862.14.4.rt56.821.el7
kernel-rt-debuginfo< 0:3.10.0-862.14.4.rt56.821.el7
kernel-rt-debuginfo-common-x86_64< 0:3.10.0-862.14.4.rt56.821.el7
kernel-rt-devel< 0:3.10.0-862.14.4.rt56.821.el7
kernel-rt-doc< 0:3.10.0-862.14.4.rt56.821.el7
kernel-rt-kvm< 0:3.10.0-862.14.4.rt56.821.el7
kernel-rt-kvm-debuginfo< 0:3.10.0-862.14.4.rt56.821.el7
kernel-rt-trace< 0:3.10.0-862.14.4.rt56.821.el7
kernel-rt-trace-debuginfo< 0:3.10.0-862.14.4.rt56.821.el7
kernel-rt-trace-devel< 0:3.10.0-862.14.4.rt56.821.el7
kernel-rt-trace-kvm< 0:3.10.0-862.14.4.rt56.821.el7
kernel-rt-trace-kvm-debuginfo< 0:3.10.0-862.14.4.rt56.821.el7
kernel-tools< 0:3.10.0-862.14.4.el7
kernel-tools-debuginfo< 0:3.10.0-862.14.4.el7
kernel-tools-libs< 0:3.10.0-862.14.4.el7
kernel-tools-libs-devel< 0:3.10.0-862.14.4.el7
perf< 0:3.10.0-862.14.4.el7 | < 0:2.6.32-358.94.1.el6
perf-debuginfo< 0:3.10.0-862.14.4.el7 | < 0:2.6.32-358.94.1.el6
python-perf< 0:3.10.0-862.14.4.el7 | < 0:2.6.32-358.94.1.el6
python-perf-debuginfo< 0:3.10.0-862.14.4.el7 | < 0:2.6.32-358.94.1.el6

Show all 49

F518 products

big-ip_access_policy_manager≥ 11.2.1, < 11.6.4 | ≥ 12.1.0, < 12.1.5 | ≥ 13.0.0, < 13.1.1.5 | ≥ 14.0.0, < 14.0.1.1 | ≥ 14.1.0, < 14.1.0.6
big-ip_advanced_firewall_manager≥ 11.2.1, < 11.6.4 | ≥ 12.1.0, < 12.1.5 | ≥ 13.0.0, < 13.1.1.5 | ≥ 14.0.0, < 14.0.1.1 | ≥ 14.1.0, < 14.1.0.6
big-ip_analytics≥ 11.2.1, < 11.6.4 | ≥ 12.1.0, < 12.1.5 | ≥ 13.0.0, < 13.1.1.5 | ≥ 14.0.0, < 14.0.1.1 | ≥ 14.1.0, < 14.1.0.6
big-ip_application_acceleration_manager≥ 11.2.1, < 11.6.4 | ≥ 12.1.0, < 12.1.5 | ≥ 13.0.0, < 13.1.1.5 | ≥ 14.0.0, < 14.0.1.1 | ≥ 14.1.0, < 14.1.0.6
big-ip_application_security_manager≥ 11.2.1, < 11.6.4 | ≥ 12.1.0, < 12.1.5 | ≥ 13.0.0, < 13.1.1.5 | ≥ 14.0.0, < 14.0.1.1 | ≥ 14.1.0, < 14.1.0.6

Show all 18

Ubuntu14 products

linux< 3.13.0-160.210 | < 4.4.0-93.116
linux-aws< 4.4.0-1032.41
linux-azure-fdeAll versions (No fix recorded)
linux-euclid< 4.4.0-9029.31
linux-gcp< 4.13.0-1002.5

Show all 14

Canonical1 product

ubuntu_linuxEOL12.04 | 14.04

Debian1 product

linux< 4.12.6-1

Linux1 product

linux_kernel≥ 2.6.0, ≤ 2.6.39.4 | ≥ 3.10, ≤ 3.10.102 | ≥ 4.14, ≤ 4.14.54

Netapp1 product

snapprotectna

Paloaltonetworks1 product

pan-os≥ 7.1.0, < 7.1.23 | ≥ 8.0.0, < 8.0.16 | ≥ 8.1.0, < 8.1.7

The linux foundation1 product

kernel2.6.x, 3.10.x, 4.14.x

9 vendors · 87 products

References

42 links

access.redhat.com/errata/RHSA-2018:3540Vendor AdvisoryX Refsource REDHATThird Party Advisory
security.netapp.com/advisory/ntap-20190204-0002/X Refsource CONFIRMPatchThird Party Advisory
access.redhat.com/errata/RHSA-2018:2925Vendor AdvisoryX Refsource REDHATThird Party Advisory
access.redhat.com/errata/RHSA-2018:3591Vendor AdvisoryX Refsource REDHATThird Party Advisory
www.exploit-db.com/exploits/45516/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
usn.ubuntu.com/3775-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
access.redhat.com/errata/RHSA-2018:2933Vendor AdvisoryX Refsource REDHATThird Party Advisory
usn.ubuntu.com/3779-1/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
access.redhat.com/errata/RHSA-2018:2748Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
access.redhat.com/errata/RHSA-2018:3590Vendor AdvisoryX Refsource REDHATThird Party Advisory

Show all 42 references

usn.ubuntu.com/3775-2/Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
access.redhat.com/errata/RHSA-2018:2763Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
www.securityfocus.com/bid/105407VDB EntryX Refsource BIDBroken LinkThird Party Advisory
access.redhat.com/errata/RHSA-2018:2924Vendor AdvisoryX Refsource REDHATThird Party Advisory
access.redhat.com/errata/RHSA-2018:3586Vendor AdvisoryX Refsource REDHATThird Party Advisory
access.redhat.com/errata/RHSA-2018:3643Vendor AdvisoryX Refsource REDHATThird Party AdvisoryAdvisory
access.redhat.com/errata/RHSA-2018:2846Vendor AdvisoryX Refsource REDHATThird Party Advisory
www.openwall.com/lists/oss-security/2018/09/25/4Mailing ListX Refsource MLISTExploitThird Party AdvisoryARTICLE
bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14634X Refsource CONFIRMIssue TrackingThird Party Advisory
support.f5.com/csp/article/K20934447?utm_source=f5support&amp%3Butm_medium=RSSX Refsource CONFIRMThird Party Advisory
security.paloaltonetworks.com/CVE-2018-14634X Refsource CONFIRMThird Party Advisory
www.openwall.com/lists/oss-security/2021/07/20/2Mailing ListX Refsource MLISTThird Party Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-14634Government ResourceUS Government Resource
access.redhat.com/security/updates/classification/ARTICLE
access.redhat.com/articles/3588731ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=1624498REPORT
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2748.jsonAdvisory
access.redhat.com/security/cve/CVE-2018-14634REPORT
www.cve.org/CVERecord?id=CVE-2018-14634AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2018-14634Advisory
access.redhat.com/security/vulnerabilities/mutagen-astronomyARTICLE
www.cisa.gov/known-exploited-vulnerabilities-catalogARTICLEREPORT
bugzilla.redhat.com/show_bug.cgi?id=1616429REPORT
bugzilla.redhat.com/show_bug.cgi?id=1617941REPORT
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_2763.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_3643.jsonAdvisory
ubuntu.com/security/CVE-2018-14634REPORT
www.qualys.com/2018/…REPORT
ubuntu.com/security/notices/USN-3775-1Advisory
ubuntu.com/security/notices/USN-3775-2Advisory
ubuntu.com/security/notices/USN-3779-1Advisory
security-tracker.debian.org/tracker/CVE-2018-14634Advisory