CVE-2018-14634
Linux Kernel Integer Overflow Vulnerability
CVSS
—
No CVSS
EPSS
14.7%
p96
KEV
YES
Jan 26, 2026
Exploit Today
79
0-100
Published: — · Last modified: —
Product
Linux / Kernel
Vulnerability
Linux Kernel Integer Overflow Vulnerability
Added to KEV
Jan 26, 2026
Remediate by
Feb 16, 2026
Known ransomware use
No
Summary description
Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system.
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Notes
This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/about/ ; https://www.kernel.org/ ; https://www.cve.org/CVERecord?id=CVE-2018-14634 ; https://access.redhat.com/errata/RHSA-2018:3540 ; https://nvd.nist.gov/vuln/detail/CVE-2018-14634