kernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks during certain migrations, which allows local users to gain privileges via a crafted application, aka Android internal bug 30955111. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6786
