NetSight
IP …
high7.8

CVE-2016-9120

Race condition in the ion_ioctl function in drivers/staging/android/ion/ion.c in the Linux kernel before 4.6 allows local users to gain privileges or cause a d…

Impact

Race condition in the ion_ioctl function in drivers/staging/android/ion/ion.c in the Linux kernel before 4.6 allows local users to gain privileges or cause a denial of service (use-after-free) by calling ION_IOC_FREE on two CPUs at the same time.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.14 before 3.16.40
from 3.17 before 3.18.51
from 3.19 before 4.1.41
from 4.2 before 4.4.65
from 4.5 before 4.6

Weakness classification

CWE-264CWE-416

References