CVE-2018-14634: Linux Kernel Integer Overflow Vulnerability

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: yes — in CISA KEV since 2026-01-26
EPSS: 14.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-09-25 · updated 2026-06-17
Weakness: CWE-190

Description

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.

Affected products

Canonical Ubuntu Linux: 12.04, 14.04
F5 BIG-IP APM: from 11.2.1 before 11.6.4; from 12.1.0 before 12.1.5; from 13.0.0 before 13.1.1.5; from 14.0.0 before 14.0.1.1; from 14.1.0 before 14.1.0.6 — fixed in 11.6.4, 12.1.5, 13.1.1.5, 14.0.1.1, 14.1.0.6
BIG-IP: from 11.2.1 before 11.6.4; from 12.1.0 before 12.1.5; from 13.0.0 before 13.1.1.5; from 14.0.0 before 14.0.1.1; from 14.1.0 before 14.1.0.6 — fixed in 11.6.4, 12.1.5, 13.1.1.5, 14.0.1.1, 14.1.0.6
F5 Big-Ip Analytics: from 11.2.1 before 11.6.4; from 12.1.0 before 12.1.5; from 13.0.0 before 13.1.1.5; from 14.0.0 before 14.0.1.1; from 14.1.0 before 14.1.0.6 — fixed in 11.6.4, 12.1.5, 13.1.1.5, 14.0.1.1, 14.1.0.6
F5 Networks, Inc. BIG-IP (AAM): from 11.2.1 before 11.6.4; from 12.1.0 before 12.1.5; from 13.0.0 before 13.1.1.5; from 14.0.0 before 14.0.1.1; from 14.1.0 before 14.1.0.6 — fixed in 11.6.4, 12.1.5, 13.1.1.5, 14.0.1.1, 14.1.0.6
BIG-IP ASM: from 11.2.1 before 11.6.4; from 12.1.0 before 12.1.5; from 13.0.0 before 13.1.1.5; from 14.0.0 before 14.0.1.1; from 14.1.0 before 14.1.0.6 — fixed in 11.6.4, 12.1.5, 13.1.1.5, 14.0.1.1, 14.1.0.6
F5 BIG-IP DNS: from 11.2.1 before 11.6.4; from 12.1.0 before 12.1.5; from 13.0.0 before 13.1.1.5; from 14.0.0 before 14.0.1.1; from 14.1.0 before 14.1.0.6 — fixed in 11.6.4, 12.1.5, 13.1.1.5, 14.0.1.1, 14.1.0.6
F5 Big-Ip Edge Gateway: from 11.2.1 before 11.6.4; from 12.1.0 before 12.1.5; from 13.0.0 before 13.1.1.5; from 14.0.0 before 14.0.1.1; from 14.1.0 before 14.1.0.6 — fixed in 11.6.4, 12.1.5, 13.1.1.5, 14.0.1.1, 14.1.0.6
F5 Big-Ip Fraud Protection Service: from 11.2.1 before 11.6.4; from 12.1.0 before 12.1.5; from 13.0.0 before 13.1.1.5; from 14.0.0 before 14.0.1.1; from 14.1.0 before 14.1.0.6 — fixed in 11.6.4, 12.1.5, 13.1.1.5, 14.0.1.1, 14.1.0.6
F5 Big-Ip Global Traffic Manager: from 11.2.1 before 11.6.4; from 12.1.0 before 12.1.5; from 13.0.0 before 13.1.1.5; from 14.0.0 before 14.0.1.1; from 14.1.0 before 14.1.0.6 — fixed in 11.6.4, 12.1.5, 13.1.1.5, 14.0.1.1, 14.1.0.6
F5 Big-Ip Link Controller: from 11.2.1 before 11.6.4; from 12.1.0 before 12.1.5; from 13.0.0 before 13.1.1.5; from 14.0.0 before 14.0.1.1; from 14.1.0 before 14.1.0.6 — fixed in 11.6.4, 12.1.5, 13.1.1.5, 14.0.1.1, 14.1.0.6
F5 BIG-IP (LTM): from 11.2.1 before 11.6.4; from 12.1.0 before 12.1.5; from 13.0.0 before 13.1.1.5; from 14.0.0 before 14.0.1.1; from 14.1.0 before 14.1.0.6 — fixed in 11.6.4, 12.1.5, 13.1.1.5, 14.0.1.1, 14.1.0.6
F5 Networks, Inc. BIG-IP (PEM): from 11.2.1 before 11.6.4; from 12.1.0 before 12.1.5; from 13.0.0 before 13.1.1.5; from 14.0.0 before 14.0.1.1; from 14.1.0 before 14.1.0.6 — fixed in 11.6.4, 12.1.5, 13.1.1.5, 14.0.1.1, 14.1.0.6
F5 Big-Ip Webaccelerator: from 11.2.1 before 11.6.4; from 12.1.0 before 12.1.5; from 13.0.0 before 13.1.1.5; from 14.0.0 before 14.0.1.1; from 14.1.0 before 14.1.0.6 — fixed in 11.6.4, 12.1.5, 13.1.1.5, 14.0.1.1, 14.1.0.6
F5 BIG-IQ: from 5.0.0 through 5.4.0; from 6.0.0 through 6.0.1; from 7.0.0 through 7.1.0; 4.6.0
F5 Networks, Inc. BIG-IQ Cloud and Orchestration: 1.0.0
F5 Networks, Inc. Enterprise Manager: 3.1.1
F5 Networks, Inc. iWorkflow: from 2.2.0 through 2.3.0
F5 Traffix SDC: from 5.0.0 through 5.1.0; 4.4.0
Linux kernel: from 2.6.0 through 2.6.39.4; from 3.10 through 3.10.102; from 4.14 through 4.14.54
NetApp Snapprotect: all versions
Palo Alto Networks PAN-OS: from 7.1.0 before 7.1.23; from 8.0.0 before 8.0.16; from 8.1.0 before 8.1.7 — fixed in 7.1.23, 8.0.16, 8.1.7
RedHat Enterprise Linux Desktop: 6.0, 7.0
RedHat Enterprise Linux Server: 6.0, 7.0
RedHat Enterprise Linux Server Aus: 6.5, 6.6, 7.6
RedHat Enterprise Linux Server Eus: 6.7, 7.5, 7.6
RedHat Enterprise Linux Server Tus: 6.6, 7.6
RedHat Enterprise Linux Workstation: 6.0, 7.0

How to fix

Upgrade to a fixed version: F5 BIG-IP APM 11.6.4, 12.1.5, 13.1.1.5, 14.0.1.1; BIG-IP 11.6.4, 12.1.5, 13.1.1.5, 14.0.1.1; F5 Big-Ip Analytics 11.6.4, 12.1.5, 13.1.1.5, 14.0.1.1; F5 Networks, Inc. BIG-IP (AAM) 11.6.4, 12.1.5, 13.1.1.5, 14.0.1.1; BIG-IP ASM 11.6.4, 12.1.5, 13.1.1.5, 14.0.1.1; F5 BIG-IP DNS 11.6.4, 12.1.5, 13.1.1.5, 14.0.1.1; F5 Big-Ip Edge Gateway 11.6.4, 12.1.5, 13.1.1.5, 14.0.1.1; F5 Big-Ip Fraud Protection Service 11.6.4, 12.1.5, 13.1.1.5, 14.0.1.1; F5 Big-Ip Global Traffic Manager 11.6.4, 12.1.5, 13.1.1.5, 14.0.1.1; F5 Big-Ip Link Controller 11.6.4, 12.1.5, 13.1.1.5, 14.0.1.1; F5 BIG-IP (LTM) 11.6.4, 12.1.5, 13.1.1.5, 14.0.1.1; F5 Networks, Inc. BIG-IP (PEM) 11.6.4, 12.1.5, 13.1.1.5, 14.0.1.1. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2018-14634 or the next vulnerability affects your stack