Description: use-after-free in TIOCGETD ioctl
References: http://lkml.iu.edu/hypermail/linux/kernel/1511.3/03045.html
Notes:
Bugs:
upstream: released (4.5-rc2) [5c17c861a357e9458001f021a7afa7aab9937439]
3.16-upstream-stable: released (3.16.7-ckt25)
3.2-upstream-stable: released (3.2.78) [tty-fix-unsafe-ldisc-reference-via-ioctl-tiocgetd.patch]
2.6.32-upstream-stable: released (2.6.32.71)
sid: released (4.3.3-6) [bugfix/all/tty-fix-unsafe-ldisc-reference-via-ioctl-tiocgetd.patch]
3.16-jessie-security: released (3.16.7-ckt20-1+deb8u3) [bugfix/all/tty-fix-unsafe-ldisc-reference-via-ioctl-tiocgetd.patch]
3.2-wheezy-security: released (3.2.73-2+deb7u3) [bugfix/all/tty-fix-unsafe-ldisc-reference-via-ioctl-tiocgetd.patch]
2.6.32-squeeze-security: released (2.6.32-48squeeze19) [bugfix/all/tty-fix-unsafe-ldisc-reference-via-ioctl-tiocgetd.patch]