Back to Database
Status published
High
CVE-2018-14634
An integer overflow flaw was found in the Linux kernel's...
Vulnerability Description
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-14634
Credits & Attribution
No credits recorded in the NVD database.
References
- https://access.redhat.com/errata/RHSA-2018:3540
- https://security.netapp.com/advisory/ntap-20190204-0002/
- https://access.redhat.com/errata/RHSA-2018:2925
- https://access.redhat.com/errata/RHSA-2018:3591
- https://www.exploit-db.com/exploits/45516/
- https://usn.ubuntu.com/3775-1/
- https://access.redhat.com/errata/RHSA-2018:2933
- https://usn.ubuntu.com/3779-1/
- https://access.redhat.com/errata/RHSA-2018:2748
- https://access.redhat.com/errata/RHSA-2018:3590
- https://usn.ubuntu.com/3775-2/
- https://access.redhat.com/errata/RHSA-2018:2763
- http://www.securityfocus.com/bid/105407
- https://access.redhat.com/errata/RHSA-2018:2924
- https://access.redhat.com/errata/RHSA-2018:3586
- https://access.redhat.com/errata/RHSA-2018:3643
- https://access.redhat.com/errata/RHSA-2018:2846
- https://www.openwall.com/lists/oss-security/2018/09/25/4
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14634
- https://support.f5.com/csp/article/K20934447?utm_source=f5support&%3Butm_medium=RSS
- https://security.paloaltonetworks.com/CVE-2018-14634
- http://www.openwall.com/lists/oss-security/2021/07/20/2
More from The Linux Foundation
View All →CVE-2020-10751
A flaw was found in the Linux kernels SELinux LSM...
Medium
6.1
CVE-2019-3901
A race condition in perf_event_open() allows local attackers to leak...
Medium
5.6
CVE-2019-3896
A double-free can happen in idr_remove_all() in lib/idr.c in the...
High
7
CVE-2019-3887
A flaw was found in the way KVM hypervisor handled...
Medium
6.7
CVE-2019-3882
A flaw was found in the Linux kernel's vfio interface...
Medium
4.7
Affected Vendor
The Linux Foundation
View all reports →Affected Software
kernel
Vulnerable Versions:
2.6.x, 3.10.x, 4.14.x
Timeline
Official Publish:
September 25th, 2018
Last Modified:
January 27th, 2026
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H