CVE-2014-9940:

The regulator_ena_gpio_free function in drivers/regulator/core.c in the Linux kernel before 3.19 allows local users to gain privileges or cause a denial of service (use-after-free) via a crafted application.

From Android security bulletin May 2017. Fix needs to be applied to chromeos-3.10, chromeos-3.14, and chromeos-3.18.

Reference: https://buganizer.corp.google.com/issues/37858885