I suspect using more than two year old (or even older) kernel versions in production is pretty common.

Anyone have stats on this?