CVE-2018-14634: Linux Kernel integer overflow in create_elf_tables

CVE-2018-14634 · Severity: critical · CVSS 7.8 · Exploited in the wild · Published 2026-01-26

A vulnerability in the Linux kernel could allow a standard user to gain full administrative control over a system. By exploiting a flaw in how the system handles internal memory tables, an attacker who already has basic access can bypass security restrictions. This could lead to unauthorized data access, system-wide changes, or a complete takeover of the affected server or device.

Technologies: Linux Kernel. Vendors: Linux.

Quick answers

Is CVE-2018-14634 exploited in the wild?
Yes. CVE-2018-14634 is known to be exploited in the wild, first recorded on 26 January 2026. Treat it as urgent.
How severe is CVE-2018-14634?
Critical severity, with a CVSS score of 7.8, published 26 January 2026.
Which products and versions are affected?
Linux Linux Kernel 2.6.x, 3.10.x, 4.14.x; F5 BIG-IP 13.0.0 to 13.1.1.5.
Is there a fix for CVE-2018-14634?
A patch was published on 2018-09-25: Red Hat and other vendors released security advisories and patches Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2018-14634 attacked?
It is attacked with local access, in an operating system.
Am I affected by CVE-2018-14634?
Check whether you run Linux Kernel. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An integer overflow vulnerability (CWE-190) exists in the create_elf_tables() function within the Linux kernel. The flaw is triggered when the kernel allocates memory for argument and environment pointers during the execution of a new binary. A local, unprivileged attacker can exploit this by passing a large number of arguments to a SUID or otherwise privileged binary, leading to a buffer overflow that can overwrite memory and grant root privileges. The vulnerability affects kernel versions 2.6.x, 3.10.x, and 4.14.x, and has been observed in active exploitation. Patches are available from major Linux distributions and affected vendors like F5 and NetApp.

Affected products

  • Linux Linux Kernel 2.6.x, 3.10.x, 4.14.x
  • F5 BIG-IP 13.0.0 to 13.1.1.5

Timeline

  • 2018-09-25: disclosed: Public disclosure via oss-security mailing list
  • 2018-09-25: patched: Red Hat and other vendors released security advisories and patches
  • 2026-01-26: kev added: Added to CISA Known Exploited Vulnerabilities catalog

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.