The PVS-Studio people used their static analizer on v3.18.1,and claim that they are not familiar with the kernel but have found issues,some of which may or may not be potential vulnerabilities.This article is essentially an ad, but still interestinghttp://www.viva64.com/en/b/0299/