UBUNTU-CVE-2018-10940
The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory.
02 / AFFECTED SOFTWARE
Affected packages
136 explicit affected versions
13 explicit affected versions
53 explicit affected versions
75 explicit affected versions
34 explicit affected versions
16 explicit affected versions
15 explicit affected versions
34 explicit affected versions
14 explicit affected versions
48 explicit affected versions
45 explicit affected versions
12 explicit affected versions
7 explicit affected versions
7 explicit affected versions
6 explicit affected versions
7 explicit affected versions
4 explicit affected versions
8 explicit affected versions
26 explicit affected versions
51 explicit affected versions
6 explicit affected versions
12 explicit affected versions
1 explicit affected versions
1 explicit affected versions
23 explicit affected versions
7 explicit affected versions
7 explicit affected versions
8 explicit affected versions
7 explicit affected versions
1 explicit affected versions
61 explicit affected versions
3 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory.
05 / REFERENCES
Further evidence
- https://ubuntu.com/security/CVE-2018-10940
- https://ubuntu.com/security/notices/USN-3676-1
- https://ubuntu.com/security/notices/USN-3676-2
- https://ubuntu.com/security/notices/USN-3695-1
- https://ubuntu.com/security/notices/USN-3695-2
- https://ubuntu.com/security/notices/USN-3754-1
- https://www.cve.org/CVERecord?id=CVE-2018-10940
- https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.6