CVE-2017-10663

The sanity_check_ckpt function in fs/f2fs/super.c in the Linux kernel before 4.12.4 does not validate the blkoff and segno arrays, which allows local users to gain privileges via unspecified vectors.

• CWE-129

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=15d3042a937c13f5d9244241c7a9c8416ff6e82aMailing List, Patch, Third Party Advisory
• http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.4Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/100215Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1481149Issue Tracking, Patch
• https://github.com/torvalds/linux/commit/15d3042a937c13f5d9244241c7a9c8416ff6e82aPatch, Third Party Advisory
• https://source.android.com/security/bulletin/2017-08-01Third Party Advisory
• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=15d3042a937c13f5d9244241c7a9c8416ff6e82aMailing List, Patch, Third Party Advisory
• http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.12.4Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/100215Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1481149Issue Tracking, Patch
• https://github.com/torvalds/linux/commit/15d3042a937c13f5d9244241c7a9c8416ff6e82aPatch, Third Party Advisory
• https://source.android.com/security/bulletin/2017-08-01Third Party Advisory

Published

Aug 19, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-10658Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-10659Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-1066Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-10660Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-10661Race condition in fs/timerfd.c in the Linux kernel before 4.…7
• CVE-2017-10662The sanity_check_raw_super function in fs/f2fs/super.c in th…7.8
• CVE-2017-10664qemu-nbd in QEMU (aka Quick Emulator) does not ignore SIGPIP…7.5
• CVE-2017-10665Directory traversal vulnerability in ajaxfileupload.php in K…
• CVE-2017-10667In index.php in Zen Cart 1.6.0, the products_id parameter ca…
• CVE-2017-10668A Padding Oracle exists in OSCI-Transport 1.2 as used in OSC…
• CVE-2017-10669Signature Wrapping exists in OSCI-Transport 1.2 as used in O…
• CVE-2017-1067Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…