CISA-2018-14634 — Vulnetix

CISA-2018-14634 PUBLISHED CVSS 7.8 HIGH

Reported by redhat · Published September 25, 2018

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.

Risk Scores

CVSS 3.0

7.8

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions
The Linux Foundation	kernel	2.6.x, 3.10.x, 4.14.x
The Linux Foundation	kernel	2.6.x, 3.10.x, 4.14.x, *

Timeline

Sep 25, 2018 CVE Published
Jan 27, 2026 CVE Updated
Mar 26, 2026 Distribution Patch
Mar 26, 2026 Distribution Patch
Mar 26, 2026 Distribution Patch
Mar 26, 2026 Distribution Patch
Mar 26, 2026 Distribution Patch
Mar 26, 2026 Distribution Patch
Mar 26, 2026 Distribution Patch
Mar 26, 2026 Distribution Patch
Mar 26, 2026 Distribution Patch
Mar 26, 2026 Distribution Patch

References

RHSA-2018:3540 vendor-advisoryx_refsource_REDHAT
x_refsource_CONFIRM
RHSA-2018:2925 vendor-advisoryx_refsource_REDHAT
RHSA-2018:3591 vendor-advisoryx_refsource_REDHAT
45516 exploitx_refsource_EXPLOIT-DB
USN-3775-1 vendor-advisoryx_refsource_UBUNTU
RHSA-2018:2933 vendor-advisoryx_refsource_REDHAT
USN-3779-1 vendor-advisoryx_refsource_UBUNTU
RHSA-2018:2748 vendor-advisoryx_refsource_REDHAT
RHSA-2018:3590 vendor-advisoryx_refsource_REDHAT
USN-3775-2 vendor-advisoryx_refsource_UBUNTU
RHSA-2018:2763 vendor-advisoryx_refsource_REDHAT
105407 vdb-entryx_refsource_BID
RHSA-2018:2924 vendor-advisoryx_refsource_REDHAT
RHSA-2018:3586 vendor-advisoryx_refsource_REDHAT
RHSA-2018:3643 vendor-advisoryx_refsource_REDHAT
RHSA-2018:2846 vendor-advisoryx_refsource_REDHAT
[oss-security] 20180925 Integer overflow in Linux's create_elf_tables() (CVE-2018-14634) mailing-listx_refsource_MLIST
x_refsource_CONFIRM
x_refsource_CONFIRM

…and 3 more

Open in Interactive Console →