Live › vulnerability › CVE-2018-14634
Go to dashboardThe Linux kernel has an integer overflow in create_elf_tables() that lets a local user abuse a SUID or otherwise privileged binary to gain root. CISA lists it as actively exploited.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 5h before NVD. All times on this page are UTC.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Linux Kernel | vendor | – | – |
| paloaltonetworks pan-os | vendor | >= 7.1.0, < 7.1.23 | 7.1.23 |
| paloaltonetworks pan-os | vendor | >= 8.0.0, < 8.0.16 | 8.0.16 |
| paloaltonetworks pan-os | vendor | >= 8.1.0, < 8.1.7 | 8.1.7 |
| f5 big-ip access policy manager | vendor | >= 11.2.1, < 11.6.4 | 11.6.4 |
| f5 big-ip access policy manager |
| vendor |
| >= 12.1.0, < 12.1.5 |
| 12.1.5 |
| f5 big-ip access policy manager | vendor | >= 13.0.0, < 13.1.1.5 | 13.1.1.5 |
| f5 big-ip access policy manager | vendor | >= 14.0.0, < 14.0.1.1 | 14.0.1.1 |
| f5 big-ip access policy manager | vendor | >= 14.1.0, < 14.1.0.6 | 14.1.0.6 |
| f5 big-ip advanced firewall manager | vendor | >= 11.2.1, < 11.6.4 | 11.6.4 |
| f5 big-ip advanced firewall manager | vendor | >= 12.1.0, < 12.1.5 | 12.1.5 |
| f5 big-ip advanced firewall manager | vendor | >= 13.0.0, < 13.1.1.5 | 13.1.1.5 |
| f5 big-ip advanced firewall manager | vendor | >= 14.0.0, < 14.0.1.1 | 14.0.1.1 |
| f5 big-ip advanced firewall manager | vendor | >= 14.1.0, < 14.1.0.6 | 14.1.0.6 |
| f5 big-ip analytics | vendor | >= 11.2.1, < 11.6.4 | 11.6.4 |
| f5 big-ip analytics | vendor | >= 12.1.0, < 12.1.5 | 12.1.5 |
| f5 big-ip analytics | vendor | >= 13.0.0, < 13.1.1.5 | 13.1.1.5 |
| f5 big-ip analytics | vendor | >= 14.0.0, < 14.0.1.1 | 14.0.1.1 |
| f5 big-ip analytics | vendor | >= 14.1.0, < 14.1.0.6 | 14.1.0.6 |
| f5 big-ip application acceleration manager | vendor | >= 11.2.1, < 11.6.4 | 11.6.4 |
| f5 big-ip application acceleration manager | vendor | >= 12.1.0, < 12.1.5 | 12.1.5 |
| f5 big-ip application acceleration manager | vendor | >= 13.0.0, < 13.1.1.5 | 13.1.1.5 |
| f5 big-ip application acceleration manager | vendor | >= 14.0.0, < 14.0.1.1 | 14.0.1.1 |
| f5 big-ip application acceleration manager | vendor | >= 14.1.0, < 14.1.0.6 | 14.1.0.6 |
| f5 big-ip application security manager | vendor | >= 11.2.1, < 11.6.4 | 11.6.4 |
| f5 big-ip application security manager | vendor | >= 12.1.0, < 12.1.5 | 12.1.5 |
| f5 big-ip application security manager | vendor | >= 13.0.0, < 13.1.1.5 | 13.1.1.5 |
| f5 big-ip application security manager | vendor | >= 14.0.0, < 14.0.1.1 | 14.0.1.1 |
| f5 big-ip application security manager | vendor | >= 14.1.0, < 14.1.0.6 | 14.1.0.6 |
| f5 big-ip domain name system | vendor | >= 11.2.1, < 11.6.4 | 11.6.4 |
| f5 big-ip domain name system | vendor | >= 12.1.0, < 12.1.5 | 12.1.5 |
| f5 big-ip domain name system | vendor | >= 13.0.0, < 13.1.1.5 | 13.1.1.5 |
| f5 big-ip domain name system | vendor | >= 14.0.0, < 14.0.1.1 | 14.0.1.1 |
| f5 big-ip domain name system | vendor | >= 14.1.0, < 14.1.0.6 | 14.1.0.6 |
| f5 big-ip edge gateway | vendor | >= 11.2.1, < 11.6.4 | 11.6.4 |
| f5 big-ip edge gateway | vendor | >= 12.1.0, < 12.1.5 | 12.1.5 |
| f5 big-ip edge gateway | vendor | >= 13.0.0, < 13.1.1.5 | 13.1.1.5 |
| f5 big-ip edge gateway | vendor | >= 14.0.0, < 14.0.1.1 | 14.0.1.1 |
| f5 big-ip edge gateway | vendor | >= 14.1.0, < 14.1.0.6 | 14.1.0.6 |
| f5 big-ip fraud protection service | vendor | >= 11.2.1, < 11.6.4 | 11.6.4 |
| f5 big-ip fraud protection service | vendor | >= 12.1.0, < 12.1.5 | 12.1.5 |
Unknown from the sources.
Apply the kernel vendor's patched kernel for your distribution; CISA says to apply mitigations per vendor instructions, and the sources do not name a fixed version.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system.
CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
This page as .md · .json · in your agent: get_signal("CVE-2018-14634")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.