The mq_open system call in Linux kernel 2.6.9 in certain situations can decrement a counter twice (\double decrement\) as a result of multiple calls to the mntput function when the dentry_open function call fails which allows local users to cause a denial of service (panic) via unspecified attack vectors.