The cdromioctlmediachanged function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers to use a incorrect bounds check in the CDROM driver CDROMMEDIA_CHANGED ioctl to read out kernel memory.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-10940.json"
[
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/9de4ee40547fd315d4a0ed1dd15a2fa3559ad707",
"digest": {
"line_hashes": [
"68548507211981868204795353588951547328",
"146888397499180174071508854418132639747",
"35560585963420313851996966751719862418",
"113980690318287117221833777562101605650"
],
"threshold": 0.9
},
"id": "CVE-2018-10940-ae6dec7f",
"deprecated": false,
"target": {
"file": "drivers/cdrom/cdrom.c"
}
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://github.com/torvalds/linux/commit/9de4ee40547fd315d4a0ed1dd15a2fa3559ad707",
"digest": {
"function_hash": "202807179520855200764216597356431291058",
"length": 578.0
},
"id": "CVE-2018-10940-bcd13fa1",
"deprecated": false,
"target": {
"file": "drivers/cdrom/cdrom.c",
"function": "cdrom_ioctl_media_changed"
}
}
]