ZeroDay Findings
Sign inSign up

Findings

CVE-2018-14634

Linux Kernel Integer Overflow Vulnerability

Published Sep 25, 2018 · updated Jun 16, 2026 · Linux Kernel

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.

Timeline

Detection, updates, and resolution for this record.

  1. Sep 25, 2018 · Catalog

    Detected

    An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.

  2. Jan 26, 2026 · CISA KEV

    Known exploited

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

  3. Feb 16, 2026 · CISA KEV

    Remediation due

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

  4. Jun 16, 2026 · Catalog

    Updated

    An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CISA due date Feb 16, 2026

Affected

  • cpe canonical/ubuntu linux12.04
  • cpe f5/big-ip access policy managerversion unspecified
  • cpe f5/big-iq centralized managementversion unspecified
  • cpe linux/linux kernelversion unspecified
  • cpe paloaltonetworks/pan-osversion unspecified
  • cpe redhat/enterprise linux desktop6.0
  • vendor Linux Kernelversion unspecified

Sources

  • CISA KEVCVE-2018-14634

    Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system.

    cisa.gov
  • CVE.orgCVE-2018-14634

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2018-14634

    30-day exploitation probability 14.7%

    first.org
  • Exploit Database45516

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • NIST NVDCVE-2018-14634

    An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are beli

    nvd.nist.gov

References