CVE-2015-9016 Use after free in Android

High 7.0 Published 5 Apr 2018 Updated 17 Sep 2024

A race condition in the Android kernel's block multiqueue subsystem allows local attackers to achieve privilege escalation via a use-after-free vulnerability.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2015-9016?

CVE-2015-9016 is a high-severity use after free vulnerability in Google Android, published on 5 Apr 2018. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

In blk_mq_tag_to_rq in blk-mq.c in the upstream kernel, there is a possible use after free due to a race condition when a request has been previously freed by blk_mq_complete_request. This could lead to local escalation of privilege. Product: Android. Versions: Android kernel. Android ID: A-63083046.

Weakness: CWE-362, CWE-264

Which versions are affected by CVE-2015-9016?

It affects 1 product.

Products include Google Android.

How do I fix CVE-2015-9016?

Apply the vendor's patch.

Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.

Is CVE-2015-9016 being exploited?

There is no known exploitation of CVE-2015-9016 in the wild and no public exploit code.

All Google Android vulnerabilities

Sources

Also known as DEBIAN-CVE-2015-9016, GHSA-6q4m-7h3g-6qjr.