From $URL : Linux kernel built with Edgeport USB serial converter driver io_ti, is vulnerable to a NULL pointer dereference flaw. It happens if the device is disconnected while in use. A user able to read/write from /dev/ttyUSB? file could use this flaw to crash the system, resulting in DoS. Upstream fix: ------------- -> https://git.kernel.org/linus/1ee0a224bc9aad1de496c795f96bc6ba2c394811
There are no longer any 2.x or <3.7.4 kernels available in the repository with the exception of sys-kernel/xbox-sources which is unsupported by security.