CVE-2018-10940: Buffer Overflow
Last updated 4 July 2026
Other sources
The cdromioctlmediachanged function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers to use a incorrect bounds check in the CDROM driver CDROMMEDIACHANGED ioctl to read out kernel memory.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/kernelto a version that resolves this vulnerability.Fixed in 4.16.6 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.8-1Fixed in 7.1.8-2 - Upgrade
Upgrade
linux kernelto a version that resolves this vulnerability.Fixed in 4.16.6
Event History
Frequently Asked Questions
What is CVE-2018-10940?
CVE-2018-10940 is a vulnerability in the Linux kernel that allows local attackers to read out kernel memory.
What is the severity of CVE-2018-10940?
The severity of CVE-2018-10940 is categorized as low.
How can local attackers exploit CVE-2018-10940?
Local attackers can exploit CVE-2018-10940 by using an incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read kernel memory.
Which Linux kernel versions are affected by CVE-2018-10940?
Linux kernel versions before 4.16.6 are affected by CVE-2018-10940.
Where can I find more information about CVE-2018-10940?
You can find more information about CVE-2018-10940 in the references provided: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9de4ee40547fd315d4a0ed1dd15a2fa3559ad707, https://github.com/torvalds/linux/commit/9de4ee40547fd315d4a0ed1dd15a2fa3559ad707, and https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.6.