Vulnerability Description
The regulator_ena_gpio_free function in drivers/regulator/core.c in the Linux kernel before 3.19 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted application.
CVSS Score
7.0
HIGH
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | < 3.16.45 |
| Android | <= 7.1.1 |
Related Weaknesses (CWE)
References
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=60a236Issue TrackingPatchThird Party Advisory
- http://www.debian.org/security/2017/dsa-3945Third Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/98195Third Party AdvisoryVDB Entry
- https://github.com/torvalds/linux/commit/60a2362f769cf549dc466134efe71c8bf9fbaabIssue TrackingPatchThird Party Advisory
- https://source.android.com/security/bulletin/2017-05-01Vendor Advisory
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=60a236Issue TrackingPatchThird Party Advisory
- http://www.debian.org/security/2017/dsa-3945Third Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/98195Third Party AdvisoryVDB Entry
- https://github.com/torvalds/linux/commit/60a2362f769cf549dc466134efe71c8bf9fbaabIssue TrackingPatchThird Party Advisory
- https://source.android.com/security/bulletin/2017-05-01Vendor Advisory
FAQ
What is CVE-2014-9940?
CVE-2014-9940 is a vulnerability with a CVSS score of 7.0 (HIGH). The regulator_ena_gpio_free function in drivers/regulator/core.c in the Linux kernel before 3.19 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted appli...
How severe is CVE-2014-9940?
CVE-2014-9940 has been rated HIGH with a CVSS base score of 7.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-9940?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Google Android.