CVE-2016-9120: Linux Kernel

High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Race condition in the ion_ioctl function in drivers/staging/android/ion/ion.c in the Linux kernel before 4.6 allows local users to gain privileges or cause a denial of service (use-after-free) by calling ION_IOC_FREE on two CPUs at the same time.

Affected products

• Linux Linux Kernel: from 3.14, before 3.16.40 (fixed in 3.16.40); from 3.17, before 3.18.51 (fixed in 3.18.51); from 3.19, before 4.1.41 (fixed in 4.1.41); from 4.2, before 4.4.65 (fixed in 4.4.65); from 4.5, before 4.6 (fixed in 4.6)

Published 2016-12-08. Last modified 2026-06-17.