CVE-2015-9016

EPSS 0.1%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.1%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Lifecycle

05 Apr 2018Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

In blk_mq_tag_to_rq in blk-mq.c in the upstream kernel, there is a possible use after free due to a race condition when a request has been previously freed by blk_mq_complete_request. This could lead to local escalation of privilege. Product: Android. Versions: Android kernel. Android ID: A-63083046.

Affected products

Google Inc. · Android

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/torvalds/linux/commit/0048b4837affd153897ed1222283492070027aa9 https://source.android.com/security/bulletin/2018-02-01 https://www.debian.org/security/2018/dsa-4187