Exploitation Summary
CVE-2018-14634 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added January 26, 2026. EIP tracks 2 public exploits from researchers including Qualys Corporation, luan0ap.
AI-analyzed exploit summary This exploit leverages a stack-based buffer overflow in the Linux kernel's `execve` system call to achieve local privilege escalation. It manipulates environment variables and command-line arguments to trigger the vulnerability, requiring significant memory resources.
Description
An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.
Exploits (2)
This exploit leverages a stack-based buffer overflow in the Linux kernel's `execve` system call to achieve local privilege escalation. It manipulates environment variables and command-line arguments to trigger the vulnerability, requiring significant memory resources.
This is a proof-of-concept exploit for CVE-2018-14634, a Linux kernel vulnerability affecting versions 2.6.x, 3.10.x, and 4.14.x. The exploit leverages a buffer overflow in the kernel's argument handling to achieve local privilege escalation.
References (23)
Scores
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H