CVE-2017-17762 PUBLISHED CVSS 5 MEDIUM

In blk_mq_tag_to_rq in blk-mq.c in the upstream kernel, there is a possible use after free due to a race condition when a request has been previously freed by blk_mq_complete_request. This could lead to local escalation of privilege. Product: Android. Versions: Android kernel. Android ID: A-63083046.

EPSS 7.62% · 91.8th percentile

Risk Scores

CVSS v2.0
5
EPSS Score
7.62%
91.8th percentile

Affected Products

VendorProductVersions
Google Inc.AndroidAndroid kernel
episerverepiserver0, 7, 7
n/an/an/a

Timeline

References

Open in Interactive Console →