CVE-2015-9016

State: Published
Severity: Not scored
Published: Apr 5, 2018
Updated: Sep 17, 2024
Reserved: Mar 28, 2017

Description

In blk_mq_tag_to_rq in blk-mq.c in the upstream kernel, there is a possible use after free due to a race condition when a request has been previously freed by blk_mq_complete_request. This could lead to local escalation of privilege. Product: Android. Versions: Android kernel. Android ID: A-63083046.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
AndroidGoogle Inc.	Android kernelAffected

References

DSA-4187vendor-advisory
https://github.com/torvalds/linux/commit/0048b4837affd153897ed1222283492070027aa9
https://source.android.com/security/bulletin/2018-02-01

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.