In all Android releases from CAF using the Linux kernel, a data pointer is potentially used after it has been freed when SLIMbus is turned off by Bluetooth.Referenceshttps://source.android.com/security/bulletin/2017-06-01http://www.securitytracker.com/id/1038623