CVE-2018-14634highunder attackCWE-190

CVE-2018-14634: high-severity vulnerability in The Linux Foundation kernel

Published · Updated

Follow this CVE+ Monitor Linux+ Monitor linux

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

76Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA, has an official Brazilian government alert and has a public proof of concept.

ssvc Actcvss 7.8epss 15%
from disclosure to weapon1 day
Published on NVDSep 25
1st PoC+1d
CISA KEV+2680d
Official alert in Brazil

Brazil's federal government published an alert, recommendation or bulletin that cites this vulnerability.

Source: CTIR Gov (GSI) and CISC Gov.br, under the CC BY-ND 3.0 license.
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Fixed
47 products (910 components)
Red Hat Enterprise Linux Server (v. 7) · Red Hat Enterprise Linux Server EUS (v. 7.3) · Red Hat Enterprise Linux Server EUS (v. 7.4) · Red Hat Enterprise Linux Server (v. 6) · Red Hat Enterprise Linux Server EUS (v. 6.7) · and others 42
fix ↗
Not affected
3 products (49 components) — because the vulnerable code is not present in the product
Red Hat Enterprise Linux 8 · Red Hat Enterprise Linux 7 · Red Hat Enterprise Linux 5
Action required by CISAfederal deadline: 2026-02-16

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

A math error in how Linux creates memory tables for programs allows someone to run a privileged program and gain full control of the system by exploiting this flaw.

Technical detail

An integer overflow in the kernel's create_elf_tables() function permits local privilege escalation when an unprivileged user executes a SUID binary. The flaw occurs during ELF table construction and affects kernel versions 2.6.x, 3.10.x, and 4.14.x, allowing an attacker to corrupt memory and escalate to root.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
The Linux Foundation · kernel
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — The Linux Foundation kernel

In the same product, most dangerous first.

CVE-2018-14633HIGHCVE-2018-14633EPSS 8.7%CVE-2018-14641MEDIUMCVE-2018-14641EPSS 2.9%CVE-2019-3874MEDIUMCVE-2019-3874EPSS 1.8%CVE-2018-16880MEDIUMCVE-2018-16880EPSS 0.6%CVE-2019-3882MEDIUMCVE-2019-3882EPSS 0.5%CVE-2018-16885MEDIUMCVE-2018-16885EPSS 0.4%