imPC@ndo IT

Tracker / CVE-2017-10662

CVE-2017-10662

High 7.8

The sanity_check_raw_super function in fs/f2fs/super.c in the Linux kernel before 4.11.1 does not validate the segment count, which allows local users to gain privileges via unspecified vectors.

Affected products and versions

linux linux_kernel · … → 3.18.53
linux linux_kernel · 3.19 → 4.1.41
linux linux_kernel · 4.10 → 4.10.16
linux linux_kernel · 4.11 → 4.11.1
linux linux_kernel · 4.2 → 4.4.68
linux linux_kernel · 4.5 → 4.9.28

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References