High severity · published Sep 25, 2018
CVE-2018-14634
Linux Kernel Integer Overflow Vulnerability
In wildKEV
7.8
CVSS
14.7%
EPSS
Yes
On KEV
Description
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)14.7% · higher than 97% of CVEs
Exploited in the wildYes
CISA KEVListed Jan 26, 2026
Federal remediation dueFeb 16, 2026
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
2.6.x, 3.10.x, 4.14.x · source: vendor, NVD, KEV
PA
PAN-OS · Palo Alto Networks
7.1.0 before 7.1.23; 8.0.0 before 8.0.16; 8.1.0 before 8.1.7 · source: NVD
BA
Big-ip Access Policy Manager · F5
11.2.1 before 11.6.4; 12.1.0 before 12.1.5; 13.0.0 before 13.1.1.5; 14.0.0 before 14.0.1.1; 14.1.0 before 14.1.0.6 · source: NVD
BA
Big-ip Advanced Firewall Manager · F5
11.2.1 before 11.6.4; 12.1.0 before 12.1.5; 13.0.0 before 13.1.1.5; 14.0.0 before 14.0.1.1; 14.1.0 before 14.1.0.6 · source: NVD
BA
Big-ip Analytics · F5
11.2.1 before 11.6.4; 12.1.0 before 12.1.5; 13.0.0 before 13.1.1.5; 14.0.0 before 14.0.1.1; 14.1.0 before 14.1.0.6 · source: NVD
BA
Big-ip Application Acceleration Manager · F5
11.2.1 before 11.6.4; 12.1.0 before 12.1.5; 13.0.0 before 13.1.1.5; 14.0.0 before 14.0.1.1; 14.1.0 before 14.1.0.6 · source: NVD
BA
Big-ip Application Security Manager · F5
11.2.1 before 11.6.4; 12.1.0 before 12.1.5; 13.0.0 before 13.1.1.5; 14.0.0 before 14.0.1.1; 14.1.0 before 14.1.0.6 · source: NVD
BD
Big-ip Domain Name System · F5
11.2.1 before 11.6.4; 12.1.0 before 12.1.5; 13.0.0 before 13.1.1.5; 14.0.0 before 14.0.1.1; 14.1.0 before 14.1.0.6 · source: NVD
BE
Big-ip Edge Gateway · F5
11.2.1 before 11.6.4; 12.1.0 before 12.1.5; 13.0.0 before 13.1.1.5; 14.0.0 before 14.0.1.1; 14.1.0 before 14.1.0.6 · source: NVD
BF
Big-ip Fraud Protection Service · F5
11.2.1 before 11.6.4; 12.1.0 before 12.1.5; 13.0.0 before 13.1.1.5; 14.0.0 before 14.0.1.1; 14.1.0 before 14.1.0.6 · source: NVD
BG
Big-ip Global Traffic Manager · F5
11.2.1 before 11.6.4; 12.1.0 before 12.1.5; 13.0.0 before 13.1.1.5; 14.0.0 before 14.0.1.1; 14.1.0 before 14.1.0.6 · source: NVD
BL
Big-ip Link Controller · F5
11.2.1 before 11.6.4; 12.1.0 before 12.1.5; 13.0.0 before 13.1.1.5; 14.0.0 before 14.0.1.1; 14.1.0 before 14.1.0.6 · source: NVD
In the news
VulnerabilityHigh
Mutagen Astronomy: From Discovery to CISA Recognition—A Seven-Year Journey
Introduction On January 26, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2018-14634 to its Known Exploited Vulnerabilities (KEV) catalog. The same vulnerability was discovered by the Qualys Threat Research Unit (TRU) in September 2018. We nicknamed it “Mutagen Astronomy” as a tribute to the 1992 film Sneakers. In that movie, the phrase “Setec […]
Feb 2, 2026·Qualys Blog
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-14634
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-14634
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
vendor-advisory
https://access.redhat.com/errata/RHSA-2018:3540
x_refsource_CONFIRM
https://security.netapp.com/advisory/ntap-20190204-0002/
vendor-advisory
https://access.redhat.com/errata/RHSA-2018:2925
vendor-advisory
https://access.redhat.com/errata/RHSA-2018:3591
exploit
https://www.exploit-db.com/exploits/45516/
vendor-advisory
https://usn.ubuntu.com/3775-1/
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability