CVE-2016-10208: Linux Kernel

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

The ext4_fill_super function in fs/ext4/super.c in the Linux kernel through 4.9.8 does not properly validate meta block groups, which allows physically proximate attackers to cause a denial of service (out-of-bounds read and system crash) via a crafted ext4 image.

Affected products

• Linux Linux Kernel: up to and including 4.9.8

Published 2017-02-06. Last modified 2026-06-17.