From https://secunia.com/advisories/50790/ : Description A weakness has been reported in Linux Kernel, which can be exploited by malicious, local users to disclose system information and cause a DoS (Denial of Service). The weakness is caused due to an error in net/socket.c when calling the "compat_put_timeval()" function, which incorrectly passes arguments resulting in kernel memory disclosure or system crash. Successful exploitation may require an architecture that uses a separate address space for user and kernel area (e.g. PA-RISC). Solution Fixed in the source code repository. Provided and/or discovered by Mikulas Patocka, Red Hat. Original Advisory http://seclists.org/oss-sec/2012/q4/14
There are no longer any 2.x or <3.5.4 kernels available in the repository with the exception of sys-kernel/xbox-sources which is unsupported by security.
