Could be should be. Again, no one is going to write an exploit kit for an unpatched flaw over three years old. Linux maintainers have far more pressing things to address.
