UpHeron
All vulnerabilities

Servers and applications

CVE-2018-14634

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.

Actively exploited: CISA added it to its Known Exploited Vulnerabilities catalog on 26 Jan 2026.

Severity
High 7.8
Published
25 Sept 2018
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
8.1.7, 11.6.4, 12.1.5, 13.1.1.5, 14.0.1.1, 14.1.0.6
Exploit chance
15% in the next 30 daysHigher than 96% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_access_policy_manager
  • From 11.2.1 before 11.6.4
  • From 12.1.0 before 12.1.5
  • From 13.0.0 before 13.1.1.5
  • From 14.0.0 before 14.0.1.1
  • From 14.1.0 before 14.1.0.6
F5 BIG-IPServers and applications · cpe:a:f5:big-ip_local_traffic_manager
  • From 11.2.1 before 11.6.4
  • From 12.1.0 before 12.1.5
  • From 13.0.0 before 13.1.1.5
  • From 14.0.0 before 14.0.1.1
  • From 14.1.0 before 14.1.0.6
Palo Alto Networks PAN-OSServers and applications · cpe:o:paloaltonetworks:pan-os
  • From 7.1.0 before 7.1.23
  • From 8.0.0 before 8.0.16
  • From 8.1.0 before 8.1.7

Known exploited

CISA name
Linux Kernel Integer Overflow Vulnerability
Required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due for US agencies
16 Feb 2026
Used in ransomware
Not known

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2018-14634
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2018-14634