CVE ID:	CVE-2018-10940
Description:	The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attackers to use a incorrect bounds check in the CDROM driver CDROM_MEDIA_CHANGED ioctl to read out kernel memory.
Test IDs:	1.3.6.1.4.1.25623.1.1.4.2019.0095.1   1.3.6.1.4.1.25623.1.1.4.2018.3746.1   1.3.6.1.4.1.25623.1.1.4.2019.0439.1   1.3.6.1.4.1.25623.1.1.4.2018.3934.1   1.3.6.1.4.1.25623.1.1.4.2018.4069.1   1.3.6.1.4.1.25623.1.1.4.2018.3961.1   1.3.6.1.4.1.25623.1.1.4.2018.3689.1   1.3.6.1.4.1.25623.1.1.2.2019.1587   1.3.6.1.4.1.25623.1.1.4.2019.0224.1   1.3.6.1.4.1.25623.1.0.891392   1.3.6.1.4.1.25623.1.1.4.2019.13937.1   1.3.6.1.4.1.25623.1.1.2.2018.1373   1.3.6.1.4.1.25623.1.1.2.2019.1156   1.3.6.1.4.1.25623.1.0.852140   1.3.6.1.4.1.25623.1.0.852108
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2018-10940 BugTraq ID: 104154 http://www.securityfocus.com/bid/104154 http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9de4ee40547fd315d4a0ed1dd15a2fa3559ad707 https://github.com/torvalds/linux/commit/9de4ee40547fd315d4a0ed1dd15a2fa3559ad707 https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.6 https://lists.debian.org/debian-lts-announce/2018/06/msg00000.html https://lists.debian.org/debian-lts-announce/2018/07/msg00015.html https://lists.debian.org/debian-lts-announce/2018/07/msg00016.html https://lists.debian.org/debian-lts-announce/2018/07/msg00020.html RedHat Security Advisories: RHSA-2018:2948 https://access.redhat.com/errata/RHSA-2018:2948 RedHat Security Advisories: RHSA-2018:3083 https://access.redhat.com/errata/RHSA-2018:3083 RedHat Security Advisories: RHSA-2018:3096 https://access.redhat.com/errata/RHSA-2018:3096 https://usn.ubuntu.com/3676-1/ https://usn.ubuntu.com/3676-2/ https://usn.ubuntu.com/3695-1/ https://usn.ubuntu.com/3695-2/ https://usn.ubuntu.com/3754-1/