The mq_open system call in Linux kernel 2.6.9, in certain situations, can
decrement a counter twice ("double decrement") as a result of multiple
calls to the mntput function when the dentry_open function call fails,
which allows local users to cause a denial of service (panic) via
unspecified attack vectors.
Updated: 2012-06-01 15:16:40 UTC (commit 5347)