CVSS 3.0
7.8 highCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2018-14634
High (7.8) in Linux Kernel. In CISA KEV since 2026-01-26. EPSS 15% chance of exploitation in the next 30 days.
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.
Severity
- EPSS
- 15% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
- CISA KEV
- listed 2026-01-26, due 2026-02-16
- CWE
- CWE-190
- Published
- Modified
- Record from
- the NVD, synced
Affected
- canonical:ubuntu_linux
- f5:big-ip_access_policy_manager
- f5:big-ip_advanced_firewall_manager
- f5:big-ip_analytics
- f5:big-ip_application_acceleration_manager
- f5:big-ip_application_security_manager
- f5:big-ip_domain_name_system
- f5:big-ip_edge_gateway
- f5:big-ip_fraud_protection_service
- f5:big-ip_global_traffic_manager
- f5:big-ip_link_controller
- f5:big-ip_local_traffic_manager
- f5:big-ip_policy_enforcement_manager
- f5:big-ip_webaccelerator
- f5:big-iq_centralized_management
- f5:big-iq_cloud_and_orchestration
- f5:enterprise_manager
- f5:iworkflow
- f5:traffix_signaling_delivery_controller
- linux:linux_kernel
- netapp:snapprotect
- paloaltonetworks:pan-os
- redhat:enterprise_linux_desktop
- redhat:enterprise_linux_server
- redhat:enterprise_linux_server_aus
- redhat:enterprise_linux_server_eus
- redhat:enterprise_linux_server_tus
- redhat:enterprise_linux_workstation