Information Leak in cdrom_ioctl_drive_status in Linux Kernel

CVE-2018-16658 · LOW Severity

AV:L/AC:L/AU:N/C:P/I:N/A:P

An issue was discovered in the Linux kernel before 4.18.6. An information leak in cdrom_ioctl_drive_status in drivers/cdrom/cdrom.c could be used by local attackers to read kernel memory because a cast from unsigned long to int interferes with bounds checking. This is similar to CVE-2018-10940.

Learn more about our Cis Benchmark Audit For Distribution Independent Linux.