UBUNTU-CVE-2015-9016

Description

In blk_mq_tag_to_rq in blk-mq.c in the upstream kernel, there is a possible use after free due to a race condition when a request has been previously freed by blk_mq_complete_request. This could lead to local escalation of privilege. Product: Android. Versions: Android kernel. Android ID: A-63083046.

CVSS Metrics

• v3.0•HIGH•Score: 7CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Systems

• ubuntu•linux

  < 4.2.0-16.19 | < 4.13.0-16.19

• ubuntu•linux-aws

  < 4.4.0-1002.2 | < 4.4.0-1001.10 | < 4.15.0-1001.1

• ubuntu•linux-azure

  < 4.15.0-1023.24~14.04.1 | < 4.11.0-1009.9 | < 4.15.0-1002.2

• ubuntu•linux-euclid

  < 4.4.0-9019.20

• ubuntu•linux-gcp

  < 4.10.0-1004.4 | < 4.15.0-1001.1

• ubuntu•linux-gke

  < 4.4.0-1003.3

• ubuntu•linux-hwe

  < 4.8.0-36.36~16.04.1

• ubuntu•linux-kvm

  < 4.4.0-1004.9 | < 4.15.0-1002.2

• ubuntu•linux-lts-xenial

  < 4.4.0-13.29~14.04.1

• ubuntu•linux-oem

  < 4.13.0-1008.9 | < 4.15.0-1002.3

• ubuntu•linux-raspi2

  < 4.2.0-1013.19 | < 4.13.0-1005.5

• ubuntu•linux-snapdragon

  < 4.4.0-1012.12

References (3)

• https://ubuntu.com/security/CVE-2015-9016
• https://source.android.com/security/bulletin/2018-02-01#kernel-components
• https://www.cve.org/CVERecord?id=CVE-2015-9016