Unvalidated Segment Count in sanity_check_raw_super Function in Linux Kernel

CVE-2017-10662 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

The sanity_check_raw_super function in fs/f2fs/super.c in the Linux kernel before 4.11.1 does not validate the segment count, which allows local users to gain privileges via unspecified vectors.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.