The release_one_tty function in drivers/char/tty_io.c in the Linux kernel before 2.6.34-rc4 omits certain required calls to the put_pid function, which has unspecified impact and local attack vectors.
Related bugs and status
CVE-2010-1162 (Candidate)
is related to these bugs: