CVE-2011-4914
The ROSE protocol implementation in the Linux kernel before 2.6.39 does not verify that certain data-length values are consistent with the amount of data sent, which might allow remote attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read) via crafted data to a ROSE socket.
Date published : 2012-06-21
http://ftp.osuosl.org/pub/linux/kernel/v2.6/ChangeLog-2.6.39