Note: This vulnerability (CVE-2018-14634) was originally published in 2018, however CISA added it to the Known Exploited Vulnerabilities (KEV) catalog on 2026-01-26 due to detected active exploitation. This means attackers are currently exploiting this vulnerability in real-world attacks.
Summary
| Parameter | Value |
|---|---|
| CVE ID | CVE-2018-14634 |
| CVE Publication Year | 2018 |
| Date Added to CISA KEV | 2026-01-26 |
| Vendor | Linux |
| Product | Kernal |
| CVSS Score | 7.8 (high) |
| CISA KEV Status | Yes - confirmed active exploitation |
| Ransomware | Not confirmed |
| Remediation Deadline | 2026-02-16 |
Vulnerability Description
Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system.
Required Actions
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Who Is Affected?
This vulnerability affects Kernal by Linux. Check if your organization uses this software and requires updates.
Sources
Need help securing your systems? nFlo team offers vulnerability management services. Contact us.
How can nFlo help?
If your organization uses products affected by this vulnerability, contact us. We can help with:
- Verifying whether your systems are at risk
- Implementing patches and risk mitigation
- Monitoring for exploitation attempts in your environment
Useful resources:
Related services and products
- OT Vulnerability Assessment and Configuration Analysis
- Threat Intelligence
- Red Hat Enterprise Linux AI
Frequently asked questions
What is CVE-2018-14634?
CVE-2018-14634 is a vulnerability discovered in Linux's Kernal. Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalat. The severity is rated as high (CVSS: 7.8).
Who is affected by CVE-2018-14634?
This vulnerability affects users of Linux's Kernal. Any organization using this software should immediately verify whether their systems require patching or mitigation measures.
How can I protect against CVE-2018-14634?
Apply the security patches provided by Linux or implement the recommended mitigations. CISA has set a remediation deadline of 2026-02-16. If patches are unavailable, consider disabling the vulnerable component.
What is the risk level of CVE-2018-14634?
This vulnerability has a CVSS score of 7.8 (high severity). Successful exploitation could allow an attacker to escalate privileges, gain unauthorized access to data, or disrupt Kernal operations.
Is CVE-2018-14634 actively exploited in the wild?
Yes, CISA has added this vulnerability to the Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in real-world attacks. Ransomware usage has not been confirmed yet, but the risk remains high.
