PT-2017-2770

CVE-2017-10662

·

Published

2017-05-02

·

Updated

2023-01-17

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.11.1
Description The issue is related to the sanity check raw super function in the Linux kernel, which does not properly validate the segment count. This allows local users to gain privileges via unspecified vectors. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.
Recommendations For Linux kernel versions prior to 4.11.1, update to version 4.11.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the sanity check raw super function until a patch is available.
Exploitability
Fix
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2017-1617
ALT-PU-2017-1623
USN-3470-1
USN-3470-2
Found an issue in the description? Have something to add? Feel free to write us 👾