Crash on malformed IP packet defragmentation, privilege escalation with Ext4 "move extents" ioctl.
vulners.com/securityvulns/securityvulns:doc:22919