Is CVE-2018-14634 being actively exploited?

Yes. CVE-2018-14634 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added on January 26, 2026.

What is the CVSS score for CVE-2018-14634?

CVE-2018-14634 has a CVSS 3.0 base score of 7.8 (HIGH).

CVE-2018-14634

HIGH · CVSS 7.8CISA KEV: actively exploitedEPSS 14.7%EU EUVD: exploited

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.

Key facts

CVSS score: 7.8 (v3.0)
Severity: HIGH
CVSS vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-190
EPSS score: 14.7% (97th percentile)
In CISA KEV: Yes, added January 26, 2026
In EU EUVD: Yes (EUVD-2018-6537)
Published: September 25, 2018
NVD last modified: June 17, 2026
Status: Analyzed

CISA Known Exploited Vulnerability

Linux Kernel Integer Overflow Vulnerability

Added to the KEV catalog on January 26, 2026; federal remediation due February 16, 2026.

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2018-6537 in the EU Vulnerability Database. ENISA flags it as known exploited. Last updated in EUVD on January 27, 2026.

View on the EU Vulnerability Database

Affected products

canonical / ubuntu linux
canonical / ubuntu linux
f5 / big-ip access policy manager
f5 / big-ip advanced firewall manager
f5 / big-ip analytics
f5 / big-ip application acceleration manager
f5 / big-ip application security manager
f5 / big-ip domain name system
f5 / big-ip edge gateway
f5 / big-ip fraud protection service
f5 / big-ip global traffic manager
f5 / big-ip link controller
f5 / big-ip local traffic manager
f5 / big-ip policy enforcement manager
f5 / big-ip webaccelerator
f5 / big-iq centralized management
f5 / big-iq centralized management
f5 / big-iq cloud and orchestration
f5 / enterprise manager
f5 / iworkflow
f5 / traffix signaling delivery controller
f5 / traffix signaling delivery controller
linux / linux kernel
netapp / snapprotect
paloaltonetworks / pan-os
redhat / enterprise linux desktop
redhat / enterprise linux desktop
redhat / enterprise linux server
redhat / enterprise linux server
redhat / enterprise linux server aus
redhat / enterprise linux server aus
redhat / enterprise linux server aus
redhat / enterprise linux server eus
redhat / enterprise linux server eus
redhat / enterprise linux server eus
redhat / enterprise linux server tus
redhat / enterprise linux server tus
redhat / enterprise linux workstation
redhat / enterprise linux workstation

Certified products that may be affected

1 FIPS 140 or Common Criteria certified product, from automated matching by sec-certs.org.

Red Hat Enterprise Linux 7.6 - Red Hat, Inc. - Common Criteria CCEVS-VR-VID-11039-2020 - archived

References

http://www.openwall.com/lists/oss-security/2021/07/20/2(Mailing List, Third Party Advisory)
http://www.securityfocus.com/bid/105407(Broken Link, Third Party Advisory, VDB Entry)
https://access.redhat.com/errata/RHSA-2018:2748(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2018:2763(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2018:2846(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2018:2924(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2018:2925(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2018:2933(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2018:3540(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2018:3586(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2018:3590(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2018:3591(Third Party Advisory)
https://access.redhat.com/errata/RHSA-2018:3643(Third Party Advisory)
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-14634(Issue Tracking, Third Party Advisory)
https://security.netapp.com/advisory/ntap-20190204-0002/(Patch, Third Party Advisory)
https://security.paloaltonetworks.com/CVE-2018-14634(Third Party Advisory)
https://support.f5.com/csp/article/K20934447?utm_source=f5support&amp%3Butm_medium=RSS(Third Party Advisory)
https://usn.ubuntu.com/3775-1/(Third Party Advisory)
https://usn.ubuntu.com/3775-2/(Third Party Advisory)
https://usn.ubuntu.com/3779-1/(Third Party Advisory)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-14634(US Government Resource)
https://www.exploit-db.com/exploits/45516/(Exploit, Third Party Advisory, VDB Entry)
https://www.openwall.com/lists/oss-security/2018/09/25/4(Exploit, Mailing List, Third Party Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain