The uipc system calls (uipc_syscalls.c) in OpenBSD 2.9 and 3.0 provide user mode return instead of versus rval kernel mode values to the fdrelease function, which allows local users to cause a denial of service and trigger a null dereference.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openbsd | Openbsd | 2.9 | 2.9 |
| Openbsd | Openbsd | 3.0 | 3.0 |