CVE-2017-10662: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

The sanity_check_raw_super function in fs/f2fs/super.c in the Linux kernel before 4.11.1 does not validate the segment count, which allows local users to gain privileges via unspecified vectors.

Affected products

• Linux Linux Kernel: before 3.18.53 (fixed in 3.18.53); from 3.19, before 4.1.41 (fixed in 4.1.41); from 4.2, before 4.4.68 (fixed in 4.4.68); from 4.5, before 4.9.28 (fixed in 4.9.28); from 4.10, before 4.10.16 (fixed in 4.10.16); from 4.11, before 4.11.1 (fixed in 4.11.1)

Published 2017-08-19. Last modified 2026-06-17.