Read the docs
TI-2018-10499 Aliases CVE-2018-14634GHSA-4994-8w6g-9jvw

Integer overflow in backstage kernel

Priority CRITICAL 93Exploited in the wildCWE-190Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.0 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-190 and the CVSS impact.

Summary

An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.

Why it matters now

Exploitation Active In CISA KEV since 2026-01-26CISA due date 2026-02-16
EPSS 0.14689 96th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by the CNA and NVD
Fix Fixed Red Hat: 11 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Active
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
backstagekernel2.6.x, 3.10.x, 4.14.x—No fix listedCNA
  • kernel Vendorbackstage Affected 2.6.x, 3.10.x, 4.14.x Fixed in — No fix listed CNA

CPE configurations NVD · 39

CPEVersionsRoleVendor
cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*7.1.0 to before 7.1.23; 8.0.0 to before 8.0.16; 8.1.0 to before 8.1.7VulnerableCyberArk Software, a Palo Alto Networks Company
cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*11.2.1 to before 11.6.4; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.1.5; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.0.6VulnerableF5
cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*11.2.1 to before 11.6.4; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.1.5; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.0.6VulnerableF5
cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*11.2.1 to before 11.6.4; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.1.5; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.0.6VulnerableF5
cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*11.2.1 to before 11.6.4; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.1.5; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.0.6VulnerableF5
cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*11.2.1 to before 11.6.4; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.1.5; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.0.6VulnerableF5
cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*11.2.1 to before 11.6.4; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.1.5; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.0.6VulnerableF5
cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:*11.2.1 to before 11.6.4; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.1.5; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.0.6VulnerableF5
cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*11.2.1 to before 11.6.4; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.1.5; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.0.6VulnerableF5
cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*11.2.1 to before 11.6.4; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.1.5; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.0.6VulnerableF5
  • cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:* Versions 7.1.0 to before 7.1.23; 8.0.0 to before 8.0.16; 8.1.0 to before 8.1.7 Vulnerable ·CyberArk Software, a Palo Alto Networks Company
  • cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:* Versions 11.2.1 to before 11.6.4; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.1.5; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.0.6 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:* Versions 11.2.1 to before 11.6.4; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.1.5; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.0.6 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:* Versions 11.2.1 to before 11.6.4; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.1.5; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.0.6 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:* Versions 11.2.1 to before 11.6.4; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.1.5; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.0.6 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:* Versions 11.2.1 to before 11.6.4; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.1.5; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.0.6 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:* Versions 11.2.1 to before 11.6.4; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.1.5; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.0.6 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_edge_gateway:*:*:*:*:*:*:*:* Versions 11.2.1 to before 11.6.4; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.1.5; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.0.6 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:* Versions 11.2.1 to before 11.6.4; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.1.5; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.0.6 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:* Versions 11.2.1 to before 11.6.4; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.1.5; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.0.6 Vulnerable ·F5
Show 29 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*11.2.1 to before 11.6.4; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.1.5; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.0.6VulnerableF5
cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*11.2.1 to before 11.6.4; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.1.5; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.0.6VulnerableF5
cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*11.2.1 to before 11.6.4; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.1.5; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.0.6VulnerableF5
cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:*11.2.1 to before 11.6.4; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.1.5; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.0.6VulnerableF5
cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:*5.0.0 – 5.4.0; 6.0.0 – 6.0.1; 7.0.0 – 7.1.0VulnerableF5
cpe:2.3:a:f5:big-iq_centralized_management:4.6.0:*:*:*:*:*:*:*4.6.0VulnerableF5
cpe:2.3:a:f5:big-iq_cloud_and_orchestration:1.0.0:*:*:*:*:*:*:*1.0.0VulnerableF5
cpe:2.3:a:f5:enterprise_manager:3.1.1:*:*:*:*:*:*:*3.1.1VulnerableF5
cpe:2.3:a:f5:iworkflow:*:*:*:*:*:*:*:*2.2.0 – 2.3.0VulnerableF5
cpe:2.3:a:f5:traffix_signaling_delivery_controller:*:*:*:*:*:*:*:*5.0.0 – 5.1.0VulnerableF5
cpe:2.3:a:f5:traffix_signaling_delivery_controller:4.4.0:*:*:*:*:*:*:*4.4.0VulnerableF5
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*2.6.0 – 2.6.39.4; 3.10 – 3.10.102; 4.14 – 4.14.54VulnerableLinux
cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:*6.5VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:*6.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*7.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:*6.7VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*7.5VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*7.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:*6.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*7.6VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:*12.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*14.04VulnerableCanonical
cpe:2.3:a:netapp:snapprotect:-:*:*:*:*:*:*:*not specified by NVDVulnerableNetApp
  • cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:* Versions 11.2.1 to before 11.6.4; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.1.5; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.0.6 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:* Versions 11.2.1 to before 11.6.4; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.1.5; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.0.6 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:* Versions 11.2.1 to before 11.6.4; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.1.5; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.0.6 Vulnerable ·F5
  • cpe:2.3:a:f5:big-ip_webaccelerator:*:*:*:*:*:*:*:* Versions 11.2.1 to before 11.6.4; 12.1.0 to before 12.1.5; 13.0.0 to before 13.1.1.5; 14.0.0 to before 14.0.1.1; 14.1.0 to before 14.1.0.6 Vulnerable ·F5
  • cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:* Versions 5.0.0 – 5.4.0; 6.0.0 – 6.0.1; 7.0.0 – 7.1.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-iq_centralized_management:4.6.0:*:*:*:*:*:*:* Versions 4.6.0 Vulnerable ·F5
  • cpe:2.3:a:f5:big-iq_cloud_and_orchestration:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 Vulnerable ·F5
  • cpe:2.3:a:f5:enterprise_manager:3.1.1:*:*:*:*:*:*:* Versions 3.1.1 Vulnerable ·F5
  • cpe:2.3:a:f5:iworkflow:*:*:*:*:*:*:*:* Versions 2.2.0 – 2.3.0 Vulnerable ·F5
  • cpe:2.3:a:f5:traffix_signaling_delivery_controller:*:*:*:*:*:*:*:* Versions 5.0.0 – 5.1.0 Vulnerable ·F5
  • cpe:2.3:a:f5:traffix_signaling_delivery_controller:4.4.0:*:*:*:*:*:*:* Versions 4.4.0 Vulnerable ·F5
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions 2.6.0 – 2.6.39.4; 3.10 – 3.10.102; 4.14 – 4.14.54 Vulnerable ·Linux
  • cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:6.5:*:*:*:*:*:*:* Versions 6.5 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:6.6:*:*:*:*:*:*:* Versions 6.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:6.7:*:*:*:*:*:*:* Versions 6.7 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:* Versions 7.5 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:6.6:*:*:*:*:*:*:* Versions 6.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* Versions 7.6 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:esm:*:*:* Versions 12.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:* Versions 14.04 Vulnerable ·Canonical
  • cpe:2.3:a:netapp:snapprotect:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·NetApp

Remediation

Red Hat 11 advisories

  • RHSA-2018:3643 Released 2018-11-20 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux Server AUS (v. 6.4) kernel-2.6.32-358.94.1.el6, kernel-debug-2.6.32-358.94.1.el6, kernel-debug-devel-2.6.32-358.94.1.el6 +5
    • Red Hat Enterprise Linux Server Optional AUS (v. 6.4) kernel-2.6.32-358.94.1.el6, python-perf-2.6.32-358.94.1.el6
  • RHSA-2018:3591 Released 2018-11-13 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux ComputeNode EUS (v. 7.3) kernel-3.10.0-514.61.1.el7, kernel-abi-whitelists-3.10.0-514.61.1.el7, kernel-debug-3.10.0-514.61.1.el7 +8
    • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3) kernel-tools-libs-devel-3.10.0-514.61.1.el7
    • Red Hat Enterprise Linux Server EUS (v. 7.3) kernel-3.10.0-514.61.1.el7, kernel-abi-whitelists-3.10.0-514.61.1.el7, kernel-bootwrapper-3.10.0-514.61.1.el7 +11
    • Red Hat Enterprise Linux Server Optional EUS (v. 7.3) kernel-debug-devel-3.10.0-514.61.1.el7, kernel-tools-libs-devel-3.10.0-514.61.1.el7
  • RHSA-2018:3590 Released 2018-11-13 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux Server AUS (v. 7.2) kernel-3.10.0-327.76.1.el7, kernel-abi-whitelists-3.10.0-327.76.1.el7, kernel-debug-3.10.0-327.76.1.el7 +8
    • Red Hat Enterprise Linux Server E4S (v. 7.2) kernel-3.10.0-327.76.1.el7, kernel-abi-whitelists-3.10.0-327.76.1.el7, kernel-debug-3.10.0-327.76.1.el7 +8
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.2) kernel-tools-libs-devel-3.10.0-327.76.1.el7
    • Red Hat Enterprise Linux Server Optional E4S (v. 7.2) kernel-tools-libs-devel-3.10.0-327.76.1.el7
    • Red Hat Enterprise Linux Server Optional TUS (v. 7.2) kernel-tools-libs-devel-3.10.0-327.76.1.el7
    • Red Hat Enterprise Linux Server TUS (v. 7.2) kernel-3.10.0-327.76.1.el7, kernel-abi-whitelists-3.10.0-327.76.1.el7, kernel-debug-3.10.0-327.76.1.el7 +8
Show 8 more Red Hat advisories
  • RHSA-2018:3540 Released 2018-11-13 · Red Hat rating Important
    kernel security, bug fix, and enhancement update
    • Red Hat Enterprise Linux ComputeNode EUS (v. 7.4) kernel-3.10.0-693.43.1.el7, kernel-abi-whitelists-3.10.0-693.43.1.el7, kernel-debug-3.10.0-693.43.1.el7 +8
    • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.4) kernel-tools-libs-devel-3.10.0-693.43.1.el7
    • Red Hat Enterprise Linux Server EUS (v. 7.4) kernel-3.10.0-693.43.1.el7, kernel-abi-whitelists-3.10.0-693.43.1.el7, kernel-bootwrapper-3.10.0-693.43.1.el7 +11
    • Red Hat Enterprise Linux Server Optional EUS (v. 7.4) kernel-debug-devel-3.10.0-693.43.1.el7, kernel-tools-libs-devel-3.10.0-693.43.1.el7
  • RHSA-2018:3586 Released 2018-11-13 · Red Hat rating Important
    kernel-rt security and bug fix update
    • Red Hat MRG Realtime for RHEL 6 Server v.2 kernel-rt-1:3.10.0-693.43.1.rt56.630.el6rt, kernel-rt-debug-1:3.10.0-693.43.1.rt56.630.el6rt, kernel-rt-debug-devel-1:3.10.0-693.43.1.rt56.630.el6rt +7
  • RHSA-2018:2925 Released 2018-10-17 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux HPC Node EUS (v. 6.7) kernel-2.6.32-573.65.2.el6, kernel-abi-whitelists-2.6.32-573.65.2.el6, kernel-debug-2.6.32-573.65.2.el6 +6
    • Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7) python-perf-2.6.32-573.65.2.el6
    • Red Hat Enterprise Linux Server EUS (v. 6.7) kernel-2.6.32-573.65.2.el6, kernel-abi-whitelists-2.6.32-573.65.2.el6, kernel-bootwrapper-2.6.32-573.65.2.el6 +9
    • Red Hat Enterprise Linux Server Optional EUS (v. 6.7) python-perf-2.6.32-573.65.2.el6
  • RHSA-2018:2933 Released 2018-10-16 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux Server AUS (v. 6.5) kernel-2.6.32-431.93.2.el6, kernel-abi-whitelists-2.6.32-431.93.2.el6, kernel-debug-2.6.32-431.93.2.el6 +6
    • Red Hat Enterprise Linux Server Optional AUS (v. 6.5) kernel-2.6.32-431.93.2.el6, python-perf-2.6.32-431.93.2.el6
  • RHSA-2018:2924 Released 2018-10-16 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux Server AUS (v. 6.6) kernel-2.6.32-504.76.2.el6, kernel-abi-whitelists-2.6.32-504.76.2.el6, kernel-debug-2.6.32-504.76.2.el6 +6
    • Red Hat Enterprise Linux Server Optional AUS (v. 6.6) python-perf-2.6.32-504.76.2.el6
    • Red Hat Enterprise Linux Server Optional TUS (v. 6.6) python-perf-2.6.32-504.76.2.el6
    • Red Hat Enterprise Linux Server TUS (v. 6.6) kernel-2.6.32-504.76.2.el6, kernel-abi-whitelists-2.6.32-504.76.2.el6, kernel-debug-2.6.32-504.76.2.el6 +6
  • RHSA-2018:2846 Released 2018-10-09 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-754.6.3.el6, kernel-abi-whitelists-2.6.32-754.6.3.el6, kernel-debug-2.6.32-754.6.3.el6 +6
    • Red Hat Enterprise Linux Desktop Optional (v. 6) python-perf-2.6.32-754.6.3.el6
    • Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-754.6.3.el6, kernel-abi-whitelists-2.6.32-754.6.3.el6, kernel-debug-2.6.32-754.6.3.el6 +6
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) python-perf-2.6.32-754.6.3.el6
    • Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-754.6.3.el6, kernel-abi-whitelists-2.6.32-754.6.3.el6, kernel-bootwrapper-2.6.32-754.6.3.el6 +9
    • Red Hat Enterprise Linux Server Optional (v. 6) python-perf-2.6.32-754.6.3.el6
    • Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-754.6.3.el6, kernel-abi-whitelists-2.6.32-754.6.3.el6, kernel-debug-2.6.32-754.6.3.el6 +6
    • Red Hat Enterprise Linux Workstation Optional (v. 6) python-perf-2.6.32-754.6.3.el6
  • RHSA-2018:2748 Released 2018-09-25 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux Client (v. 7) kernel-3.10.0-862.14.4.el7, kernel-abi-whitelists-3.10.0-862.14.4.el7, kernel-debug-3.10.0-862.14.4.el7 +8
    • Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-862.14.4.el7
    • Red Hat Enterprise Linux ComputeNode (v. 7) kernel-3.10.0-862.14.4.el7, kernel-abi-whitelists-3.10.0-862.14.4.el7, kernel-debug-3.10.0-862.14.4.el7 +8
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-862.14.4.el7
    • Red Hat Enterprise Linux Server (v. 7) kernel-3.10.0-862.14.4.el7, kernel-abi-whitelists-3.10.0-862.14.4.el7, kernel-bootwrapper-3.10.0-862.14.4.el7 +11
    • Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-862.14.4.el7, kernel-tools-libs-devel-3.10.0-862.14.4.el7
    • Red Hat Enterprise Linux Workstation (v. 7) kernel-3.10.0-862.14.4.el7, kernel-abi-whitelists-3.10.0-862.14.4.el7, kernel-debug-3.10.0-862.14.4.el7 +8
    • Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-862.14.4.el7
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) kernel-3.10.0-862.14.4.el7, kernel-abi-whitelists-3.10.0-862.14.4.el7, kernel-bootwrapper-3.10.0-862.14.4.el7 +11
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) kernel-debug-devel-3.10.0-862.14.4.el7, kernel-doc-3.10.0-862.14.4.el7, kernel-tools-libs-devel-3.10.0-862.14.4.el7
  • RHSA-2018:2763 Released 2018-09-25 · Red Hat rating Important
    kernel-rt security and bug fix update
    • Red Hat Enterprise Linux Realtime (v. 7) kernel-rt-3.10.0-862.14.4.rt56.821.el7, kernel-rt-debug-3.10.0-862.14.4.rt56.821.el7, kernel-rt-debug-devel-3.10.0-862.14.4.rt56.821.el7 +4
    • Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt-3.10.0-862.14.4.rt56.821.el7, kernel-rt-debug-3.10.0-862.14.4.rt56.821.el7, kernel-rt-debug-devel-3.10.0-862.14.4.rt56.821.el7 +7

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    The Linux Foundation kernel — USN-3779-1

    2 records Highest priority Priority CRITICAL 1 CRITICAL, 1 MEDIUM

    Other records, highest priority first

    • TI-2018-10498 Stack-based buffer overflow in backstage kernelPriority MEDIUM 42
    Show all 2 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2018:2748
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2018:2748
Red Hat Enterprise Linux ComputeNode (v. 7)Fixed RHSA-2018:2748
Red Hat Enterprise Linux ComputeNode EUS (v. 7.3)Fixed RHSA-2018:3591
Red Hat Enterprise Linux ComputeNode EUS (v. 7.4)Fixed RHSA-2018:3540
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2018:2748
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.3)Fixed RHSA-2018:3591
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.4)Fixed RHSA-2018:3540
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2018:2846
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2018:2846
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2018:2846
Red Hat Enterprise Linux HPC Node EUS (v. 6.7)Fixed RHSA-2018:2925
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2018:2846
Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7)Fixed RHSA-2018:2925
Red Hat Enterprise Linux Realtime (v. 7)Fixed RHSA-2018:2763
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2018:2846
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2018:2748
Red Hat Enterprise Linux Server AUS (v. 6.4)Fixed RHSA-2018:3643
Red Hat Enterprise Linux Server AUS (v. 6.5)Fixed RHSA-2018:2933
Red Hat Enterprise Linux Server AUS (v. 6.6)Fixed RHSA-2018:2924
Red Hat Enterprise Linux Server AUS (v. 7.2)Fixed RHSA-2018:3590
Red Hat Enterprise Linux Server E4S (v. 7.2)Fixed RHSA-2018:3590
Red Hat Enterprise Linux Server EUS (v. 6.7)Fixed RHSA-2018:2925
Red Hat Enterprise Linux Server EUS (v. 7.3)Fixed RHSA-2018:3591
Red Hat Enterprise Linux Server EUS (v. 7.4)Fixed RHSA-2018:3540
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2018:2846
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2018:2748
Red Hat Enterprise Linux Server Optional AUS (v. 6.4)Fixed RHSA-2018:3643
Red Hat Enterprise Linux Server Optional AUS (v. 6.5)Fixed RHSA-2018:2933
Red Hat Enterprise Linux Server Optional AUS (v. 6.6)Fixed RHSA-2018:2924
Red Hat Enterprise Linux Server Optional AUS (v. 7.2)Fixed RHSA-2018:3590
Red Hat Enterprise Linux Server Optional E4S (v. 7.2)Fixed RHSA-2018:3590
Red Hat Enterprise Linux Server Optional EUS (v. 6.7)Fixed RHSA-2018:2925
Red Hat Enterprise Linux Server Optional EUS (v. 7.3)Fixed RHSA-2018:3591
Red Hat Enterprise Linux Server Optional EUS (v. 7.4)Fixed RHSA-2018:3540
Red Hat Enterprise Linux Server Optional TUS (v. 6.6)Fixed RHSA-2018:2924
Red Hat Enterprise Linux Server Optional TUS (v. 7.2)Fixed RHSA-2018:3590
Red Hat Enterprise Linux Server TUS (v. 6.6)Fixed RHSA-2018:2924
Red Hat Enterprise Linux Server TUS (v. 7.2)Fixed RHSA-2018:3590
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2018:2846
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2018:2748
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2018:2846
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2018:2748
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)Fixed RHSA-2018:2748
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)Fixed RHSA-2018:2748
Red Hat Enterprise Linux for Real Time for NFV (v. 7)Fixed RHSA-2018:2763
Red Hat MRG Realtime for RHEL 6 Server v.2Fixed RHSA-2018:3586
Not affected: 3 products
  • Red Hat Enterprise Linux 5
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8

Timeline

  1. 2026-01-26 Added to CISA KEV
  2. 2026-10-02 Threatist record created from CVE-2018-14634
  3. 2026-10-03 Alias added: GHSA-4994-8w6g-9jvw

References

Exploit 2

Patch 1

Advisory 18

  • TI-2026-33119 Malware in 42 @tanstack/* packages exfiltrates cloud credentials, GitHub tokens, and SSH keys KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-08998 Remote Code Execution in kedro-org/kedro CVSS 3.0CRITICAL 9.8
  • TI-2023-12294 Dragonfly2 vulnerable to hard coded cyptographic key CVSS 3.1CRITICAL 9.8
  • TI-2021-12074 Authentication vulnerability in MOSN v.0.23.0 allows attacker to escalate privileges via… CVSS 3.1CRITICAL 9.8
  • TI-2019-04061 runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows… CVSS 3.1HIGH 8.6
  • TI-2026-20034 Podman Desktop Extension System Vulnerable to Authentication Bypass CVSS 4.0HIGH 8.8
See all 662 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences