CVE-2014-9940: Google Android

High severity, CVSS 7.0. EPSS: 1.6% chance of exploitation in the next 30 days.

The regulator_ena_gpio_free function in drivers/regulator/core.c in the Linux kernel before 3.19 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted application.

Affected products

• Google Android: up to and including 7.1.1
• Linux Linux Kernel: after 3.10, before 3.16.45 (fixed in 3.16.45); from 3.17, before 3.18.52 (fixed in 3.18.52); version 3.10 only

Published 2017-05-02. Last modified 2026-06-17.