The commit message (10 months ago) when the vulnerability has been introduced is quite interesting:

"With recent changes there is no longer a security hazard with writing to /proc/pid/mem. Remove the #ifdef."

I'm wondering how long it will take in a proprietary software without any good commit messages to discover such bug...