From $URL :
Author: Kees Cook <keescook@...omium.org>
Date: Thu Oct 25 13:38:16 2012 -0700
fs/compat_ioctl.c: VIDEO_SET_SPU_PALETTE missing error check
The compat ioctl for VIDEO_SET_SPU_PALETTE was missing an error check
while converting ioctl arguments. This could lead to leaking kernel
stack contents into userspace.
Patch extracted from existing fix in grsecurity.
There are no longer any 2.x or <3.6.5 kernels available in the repository with
the exception of sys-kernel/xbox-sources which is unsupported by security.