If one downloads, compiles and installs the current kernel they are insecure out-of-the-box. It takes weeding through a mailing-list archive to find the patch for it. That is sad.

It's hard to claim our OS is more secure than Windows with this vulnerability hanging around.