Alexander Viro discovered a race condition in the fcntl code that may permit local users on multi-processor systems to execute parallel code paths that are otherwise prohibited and gain re-ordered access to the descriptor table.
http://www.linuxlinks.com/portal/news/article.php?story=20080513135459969