Information disclosure in Linux Kernel

CVE-2013-2164

The mmc_ioctl_cdrom_read_data function in drivers/cdrom/cdrom.c in the Linux kernel through 3.10 allows local users to obtain sensitive information from kernel memory via a read operation on a malfunctioning CD-ROM drive.

Vulnerability class: Information Disclosure

EPSS: 0.005 (41.6th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References