The __sys_sendmsg function in net/socket.c in the Linux kernel before 3.1 allows local users to cause a denial of service (system crash) via crafted use of the sendmmsg system call, leading to an incorrect pointer dereference.
- http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.1
No PoCs found on GitHub currently.