The mq_open system call in Linux kernel 2.6.9, in certain situations, can
decrement a counter twice ("double decrement") as a result of multiple
calls to the mntput function when the dentry_open function call fails,
which allows local users to cause a denial of service (panic) via
unspecified attack vectors.
Updated: 2016-03-23 03:25:49 UTC (commit 10817)