Xorg assert failure: *** Error in `/usr/bin/X': malloc(): smallbin double linked list corrupted: 0xb83bc370 ***

[Al]

After upgrading to Utopic, xorg randomly crashes with machine unattended.
After the xorg crash, I am unable to access any terminals, the only way to gracefully shut down the computer is via ssh.
No particular pattern to this, I have tried various screensavers including non-GL ones, also disabling power management to no avail.

The crashes can occur within 30 minutes of bootup, or might not happen for over 12 hours.

ProblemType: Crash
DistroRelease: Ubuntu 14.10
Package: xserver-xorg-core 2:1.16.0-1ubuntu1
ProcVersionSignature: Ubuntu 3.16.0-24.32-generic 3.16.4
Uname: Linux 3.16.0-24-generic i686
ApportVersion: 2.14.7-0ubuntu8
Architecture: i386
AssertionMessage: *** Error in `/usr/bin/X': malloc(): smallbin double linked list corrupted: 0xb83bc370 ***
Date: Tue Nov 11 16:32:58 2014
ExecutablePath: /usr/bin/Xorg
ExecutableTimestamp: 1410354773
InstallationDate: Installed on 2011-10-21 (1117 days ago)
InstallationMedia: Xubuntu 11.10 "Oneiric Ocelot" - Release i386 (20111011)
ProcCmdline: /usr/bin/X -core :0 -seat seat0 -auth /var/run/lightdm/root/:0 -nolisten tcp vt7 -novtswitch
ProcCwd: /etc/X11
ProcEnviron:

Signal: 6
SourcePackage: xorg-server
StacktraceTop:
 __libc_message (do_abort=do_abort@entry=1, fmt=fmt@entry=0xb720d79c "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/posix/libc_fatal.c:175
 malloc_printerr (action=<optimized out>, str=0xb720db20 "malloc(): smallbin double linked list corrupted", ptr=0xb83bc370) at malloc.c:4996
 _int_malloc (av=av@entry=0xb7252420 <main_arena>, bytes=bytes@entry=68) at malloc.c:3359
 __libc_calloc (n=1, elem_size=68) at malloc.c:3219
 ?? () from /usr/lib/xorg/modules/drivers/intel_drv.so
Title: Xorg assert failure: *** Error in `/usr/bin/X': malloc(): smallbin double linked list corrupted: 0xb83bc370 ***
UpgradeStatus: Upgraded to utopic on 2014-11-08 (3 days ago)
UserGroups:

[Apport retracing service (apport)]

StacktraceTop:
 __libc_message (do_abort=do_abort@entry=1, fmt=fmt@entry=0xb720d79c "*** Error in `%s': %s: 0x%s ***\n") at ../sysdeps/posix/libc_fatal.c:175
 malloc_printerr (action=<optimized out>, str=0xb720db20 "malloc(): smallbin double linked list corrupted", ptr=0xb83bc370) at malloc.c:4996
 _int_malloc (av=av@entry=0xb7252420 <main_arena>, bytes=bytes@entry=68) at malloc.c:3359
 __libc_calloc (n=1, elem_size=68) at malloc.c:3219
 sna_dri2_add_event (sna=sna@entry=0xb6930000, draw=draw@entry=0xb8365cd8, client=0xb83be558) at ../../../src/sna/sna_dri2.c:1431