CVE-2018-18710: Infoleak
An issue was discovered in the Linux kernel through 4.19. An information leak in cdromioctlselectdisc in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940 and CVE-2018-16658.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.262-1Fixed in 6.1.176-1Fixed in 6.1.180-1Fixed in 6.12.94-1Fixed in 6.12.101-1Fixed in 7.1.8-1Fixed in 7.1.8-2
Event History
Frequently Asked Questions
What is the severity of CVE-2018-18710?
CVE-2018-18710 is considered a medium severity vulnerability due to potential information leakage.
How do I fix CVE-2018-18710?
To fix CVE-2018-18710, update to a patched version of the Linux kernel, such as 5.10.223-1 or higher.
What types of systems are affected by CVE-2018-18710?
CVE-2018-18710 affects various Linux kernel versions up to 4.19 and certain distributions like Debian and Ubuntu.
Can CVE-2018-18710 be exploited remotely?
CVE-2018-18710 requires local access, meaning only authenticated local users can exploit this vulnerability.
What are the potential impacts of CVE-2018-18710?
The potential impact of CVE-2018-18710 includes unauthorized access to kernel memory, leading to sensitive information disclosure.