InfoSec Signals™
Sign InStart Free
Back to CVE records
High 7.8Known exploited (CISA KEV)Published Sep 25, 2018

CVE-2018-14634An integer overflow flaw was found in the Linux kernel's create_elf_tables() function.

Updated under an hour ago ()

Does this affect you?

It affects The Linux Foundation kernel and 28 other products. Add what you run to find out whether that includes you.

CISA lists it as known exploited since Jan 26, 2026; federal agencies had to remediate by Feb 16, 2026. Treat that date as your deadline.

Do this next

Start free and add your stack

Free account, 1 product

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.

CVSS
7.8 HIGH (v3.0, CNA)CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE)
CWE-190
Known exploited
Added to CISA KEV Jan 26, 2026; federal remediation due Feb 16, 2026Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
EPSS (exploitation in the next 30 days)
14.69% (percentile 97)
Assigned by
redhat
NVD analysis
Analyzed
Record last updated
Jan 27, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
The Linux Foundation kernel
linux_foundation:kernel (from the name)
2.6.x, 3.10.x, 4.14.x
CNA record
paloaltonetworks pan-os
paloaltonetworks:pan-os
from 7.1.0 before 7.1.23; from 8.0.0 before 8.0.16; from 8.1.0 before 8.1.7
NVD
f5 big-ip_access_policy_manager
f5:big-ip_access_policy_manager
from 11.2.1 before 11.6.4; from 12.1.0 before 12.1.5; from 13.0.0 before 13.1.1.5; from 14.0.0 before 14.0.1.1; from 14.1.0 before 14.1.0.6
NVD
f5 big-ip_advanced_firewall_manager
f5:big-ip_advanced_firewall_manager
from 11.2.1 before 11.6.4; from 12.1.0 before 12.1.5; from 13.0.0 before 13.1.1.5; from 14.0.0 before 14.0.1.1; from 14.1.0 before 14.1.0.6
NVD
f5 big-ip_analytics
f5:big-ip_analytics
from 11.2.1 before 11.6.4; from 12.1.0 before 12.1.5; from 13.0.0 before 13.1.1.5; from 14.0.0 before 14.0.1.1; from 14.1.0 before 14.1.0.6
NVD
f5 big-ip_application_acceleration_manager
f5:big-ip_application_acceleration_manager
from 11.2.1 before 11.6.4; from 12.1.0 before 12.1.5; from 13.0.0 before 13.1.1.5; from 14.0.0 before 14.0.1.1; from 14.1.0 before 14.1.0.6
NVD
f5 big-ip_application_security_manager
f5:big-ip_application_security_manager
from 11.2.1 before 11.6.4; from 12.1.0 before 12.1.5; from 13.0.0 before 13.1.1.5; from 14.0.0 before 14.0.1.1; from 14.1.0 before 14.1.0.6
NVD
f5 big-ip_domain_name_system
f5:big-ip_domain_name_system
from 11.2.1 before 11.6.4; from 12.1.0 before 12.1.5; from 13.0.0 before 13.1.1.5; from 14.0.0 before 14.0.1.1; from 14.1.0 before 14.1.0.6
NVD
f5 big-ip_edge_gateway
f5:big-ip_edge_gateway
from 11.2.1 before 11.6.4; from 12.1.0 before 12.1.5; from 13.0.0 before 13.1.1.5; from 14.0.0 before 14.0.1.1; from 14.1.0 before 14.1.0.6
NVD
f5 big-ip_fraud_protection_service
f5:big-ip_fraud_protection_service
from 11.2.1 before 11.6.4; from 12.1.0 before 12.1.5; from 13.0.0 before 13.1.1.5; from 14.0.0 before 14.0.1.1; from 14.1.0 before 14.1.0.6
NVD
f5 big-ip_global_traffic_manager
f5:big-ip_global_traffic_manager
from 11.2.1 before 11.6.4; from 12.1.0 before 12.1.5; from 13.0.0 before 13.1.1.5; from 14.0.0 before 14.0.1.1; from 14.1.0 before 14.1.0.6
NVD
f5 big-ip_link_controller
f5:big-ip_link_controller
from 11.2.1 before 11.6.4; from 12.1.0 before 12.1.5; from 13.0.0 before 13.1.1.5; from 14.0.0 before 14.0.1.1; from 14.1.0 before 14.1.0.6
NVD
f5 big-ip_local_traffic_manager
f5:big-ip_local_traffic_manager
from 11.2.1 before 11.6.4; from 12.1.0 before 12.1.5; from 13.0.0 before 13.1.1.5; from 14.0.0 before 14.0.1.1; from 14.1.0 before 14.1.0.6
NVD
f5 big-ip_policy_enforcement_manager
f5:big-ip_policy_enforcement_manager
from 11.2.1 before 11.6.4; from 12.1.0 before 12.1.5; from 13.0.0 before 13.1.1.5; from 14.0.0 before 14.0.1.1; from 14.1.0 before 14.1.0.6
NVD
f5 big-ip_webaccelerator
f5:big-ip_webaccelerator
from 11.2.1 before 11.6.4; from 12.1.0 before 12.1.5; from 13.0.0 before 13.1.1.5; from 14.0.0 before 14.0.1.1; from 14.1.0 before 14.1.0.6
NVD
f5 big-iq_centralized_management
f5:big-iq_centralized_management
from 5.0.0 through 5.4.0; from 6.0.0 through 6.0.1; from 7.0.0 through 7.1.0; 4.6.0
NVD
f5 big-iq_cloud_and_orchestration
f5:big-iq_cloud_and_orchestration
1.0.0
NVD
f5 enterprise_manager
f5:enterprise_manager
3.1.1
NVD
f5 iworkflow
f5:iworkflow
from 2.2.0 through 2.3.0
NVD
f5 traffix_signaling_delivery_controller
f5:traffix_signaling_delivery_controller
from 5.0.0 through 5.1.0; 4.4.0
NVD
linux linux_kernel
linux:linux_kernel
from 2.6.0 through 2.6.39.4; from 3.10 through 3.10.102; from 4.14 through 4.14.54
NVD
redhat enterprise_linux_desktop
redhat:enterprise_linux_desktop
6.0; 7.0
NVD
redhat enterprise_linux_server
redhat:enterprise_linux_server
6.0; 7.0
NVD
redhat enterprise_linux_server_aus
redhat:enterprise_linux_server_aus
6.5; 6.6; 7.6
NVD
redhat enterprise_linux_server_eus
redhat:enterprise_linux_server_eus
6.7; 7.5; 7.6
NVD
redhat enterprise_linux_server_tus
redhat:enterprise_linux_server_tus
6.6; 7.6
NVD
redhat enterprise_linux_workstation
redhat:enterprise_linux_workstation
6.0; 7.0
NVD
canonical ubuntu_linux
canonical:ubuntu_linux
12.04; 14.04
NVD
netapp snapprotect
netapp:snapprotect
all versions
NVD

References

  • vendor-advisory, x-refsource-redhat, third-party-advisory
  • x-refsource-confirm, patch, third-party-advisory
  • vendor-advisory, x-refsource-redhat, third-party-advisory
  • vendor-advisory, x-refsource-redhat, third-party-advisory
  • exploit, x-refsource-exploit-db, third-party-advisory, vdb-entry
  • vendor-advisory, x-refsource-ubuntu, third-party-advisory
  • vendor-advisory, x-refsource-redhat, third-party-advisory
  • vendor-advisory, x-refsource-ubuntu, third-party-advisory
  • vendor-advisory, x-refsource-redhat, third-party-advisory
  • vendor-advisory, x-refsource-redhat, third-party-advisory
  • vendor-advisory, x-refsource-ubuntu, third-party-advisory
  • vendor-advisory, x-refsource-redhat, third-party-advisory
  • vdb-entry, x-refsource-bid, broken-link, third-party-advisory
  • vendor-advisory, x-refsource-redhat, third-party-advisory
  • vendor-advisory, x-refsource-redhat, third-party-advisory
  • vendor-advisory, x-refsource-redhat, third-party-advisory
  • vendor-advisory, x-refsource-redhat, third-party-advisory
  • mailing-list, x-refsource-mlist, exploit, third-party-advisory
  • x-refsource-confirm, issue-tracking, third-party-advisory
  • x-refsource-confirm, third-party-advisory
  • x-refsource-confirm, third-party-advisory
  • mailing-list, x-refsource-mlist, third-party-advisory
  • us-government-resource

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.