The mq_open system call in Linux kernel 2.6.9, in certain situations, can
decrement a counter twice ("double decrement") as a result of multiple
calls to the mntput function when the dentry_open function call fails,
which allows local users to cause a denial of service (panic) via
unspecified attack vectors.
Updated: 2015-10-17 03:24:54 UTC (commit 10086)