cyfenced.com →

[ CVE-2018-14634 · Published 25 Sep 2018 ]

Linux Kernel Integer Overflow Vulnerability

Exploited · CISA KEV CVSS 7.8 EPSS 15%Fix available

[ Why it matters ]Priority signals

  • Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2026-01-26
  • EPSS: 15% chance of exploitation in the next 30 days (higher than 97% of CVEs)

[ Description ]Official description

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.

CISA: Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system.

[ Fixes ]Fixes and patches

CISA required action (US federal deadline 16 Feb 2026): Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

[ References ]References