VULNERABILITY INTELLIGENCE

CVE-2015-9016

CVSS score7 HIGH
EPSS probability0.14%
CISA KEVNot currently listed
Published2018-04-05
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

In blk_mq_tag_to_rq in blk-mq.c in the upstream kernel, there is a possible use after free due to a race condition when a request has been previously freed by blk_mq_complete_request. This could lead to local escalation of privilege. Product: Android. Versions: Android kernel. Android ID: A-63083046.

Weakness classification

  • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Primary references