Linux kernel 2.6.27 exploits

from blog tail -f /var/log/messages | grep vegard, | ↗ original
I found two exploits of the Linux kernel back in January.The first one is a crash in inotify, where a locking imbalance would unlock the inotify mutex twice before returning to userspace. It happens only if the buffer passed to read() was an invalid userspace address. It's fixed in mainline and went into -stable last month (if I recall...