Race condition

Race condition in the ttyfasync function in drivers/char/ttyio.c in the Linux kernel before 2.6.32.6 allows local users to cause a denial of service NULL pointer dereference and system crash or possibly have unspecified other impact via unknown vectors, related to the putttyqueue and fsetown...