{"id":"CVE-2018-10940","published":"2018-05-09T17:00:00Z","modified":"2024-08-05T07:54:35Z","title":"The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local…","vendor":null,"product":null,"tier":"tail","description":{"text":"The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00532,"percentile":0.44831,"provenance":"source"},"cwes":[],"references":[{"url":"https://usn.ubuntu.com/3676-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3083","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://usn.ubuntu.com/3695-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://usn.ubuntu.com/3695-2/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9de4ee40547fd315d4a0ed1dd15a2fa3559ad707","tags":["x_refsource_MISC"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/06/msg00000.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.6","tags":["x_refsource_MISC"]},{"url":"https://usn.ubuntu.com/3754-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://access.redhat.com/errata/RHSA-2018:2948","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://github.com/torvalds/linux/commit/9de4ee40547fd315d4a0ed1dd15a2fa3559ad707","tags":["x_refsource_MISC"]},{"url":"https://usn.ubuntu.com/3676-2/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"http://www.securityfocus.com/bid/104154","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3096","tags":["vendor-advisory","x_refsource_REDHAT"]}],"priority":{"score":9.0,"factors":[{"name":"EPSS percentile","points":8.97}]},"euvd":{"id":"EUVD-2018-2992","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-cve-2018-10940-family-cve-2018-10940","children":[{"from":"CVE-2018-10940","to":"CVE-2018-16658","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"This is similar to CVE-2018-10940.","from":"CVE.org","in":"CVE-2018-16658"},{"kind":"same-code","provenance":"machine","files":["drivers/cdrom/cdrom.c"],"commits":["https://github.com/torvalds/linux/commit/9de4ee40547fd315d4a0ed1dd15a2fa3559ad707","https://github.com/torvalds/linux/commit/8f3fafc9c2f0ece10832c25f7ffcb07c97a32ad4"],"basis":"shared function","functions":["cdrom_device_info"]}]},{"from":"CVE-2018-10940","to":"CVE-2018-18710","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"This is similar to CVE-2018-10940 and CVE-2018-16658.","from":"CVE.org","in":"CVE-2018-18710"},{"kind":"same-code","provenance":"machine","files":["drivers/cdrom/cdrom.c"],"commits":["https://github.com/torvalds/linux/commit/9de4ee40547fd315d4a0ed1dd15a2fa3559ad707","https://github.com/torvalds/linux/commit/e4f3aa2e1e67bb48dfbaaf1cad59013d5a5bc276"],"basis":"shared function","functions":["cdrom_device_info"]}]}]}}