The mq_open system call in Linux kernel 2.6.9, in certain situations, can
decrement a counter twice ("double decrement") as a result of multiple
calls to the mntput function when the dentry_open function call fails,
which allows local users to cause a denial of service (panic) via
unspecified attack vectors.
Updated: 2015-07-29 20:26:43 UTC (commit 9756)