CVE-2018-14634VulnerabilityPublished 01/26/2026Updated 10/24/2026
CVE-2018-14634: Linux Kernel Integer Overflow Vulnerability
Affects Linux KernelSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 01/26/2026
- KEV deadline
- 02/16/2026
- EPSS
- 14.7% chance of exploitation in 30 days – higher than 96% of CVEs
What to do
CISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Description
Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system.
Weaknesses
References
- git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/about/ (opens in a new tab)
- kernel.org (opens in a new tab)
- cve.org/CVERecord?id=CVE-2018-14634 (opens in a new tab)
- access.redhat.com/errata/RHSA-2018:3540 (opens in a new tab)
- nvd.nist.gov/vuln/detail/CVE-2018-14634 (opens in a new tab)
- cisa.gov/known-exploited-vulnerabilities-catalog?search=CVE-2018-14634 (opens in a new tab)