Does that actually mean that we should migrate
to newer kernels as soon as the hole gets fixed?

I reckon, even though there are plenty of
machines that run older than 3.8 (2.6.32 notably)
this affects pretty much everyone, at least here.

Well, applying patches is not something
time-consuming, but still.

Thanks for letting us know,
Mitt