In all android releases (Android for MSM Firefox OS for MSM QRD Android) from CAF using the linux kernel while calling IPA_IOC_MDFY_RT_RULE IPA IOCTL header entry is not checked before use. If IPA_IOC_MDFY_RT_RULE IOCTL called for header entries formerly deleted a Use after free condition will occur.