NetSight
IP …
medium5.5

CVE-2018-10940

The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers to use a incorrect bounds check in the…

Impact

The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.16.6
DebianDebian Linux
Version 7.0

Weakness classification

CWE-119

References