Full title: Linux DRM drm_file_update_pid() Race Condition / Use-After-Free Exploit 
Category: dos / poc
Platform: linux
Linux DRM has drm_file_update_pid() call to get_pid() too late, which creates a race condition that can lead to use-after-free issue of a struct pid.

# 0day.today @ http://0day.today/