backport from 3.12.20 - fix critical kernel vulnerability (CVE-2014-0196)