I also agree with your assessment that this appears to be a software problem. Having said that, I am unable to match this to a specific bug. Given this, it is impossible to provide you with the IOS that has the fix.
Generally speaking, per Cisco the "suggested" release for this product family is 12.2(55)SE11 which came out two months ago. The "release notes" section titled "Caveats Resolved in Cisco IOS Release 12.2(55)SE11" shows bugs that were resolved between your release SE10 and the Cisco/suggested release.
For the future, kindly consider attaching the following anytime you experience a crash:
contents of crashinfo files which are located in crashinfo and crashinfo_ext dir, within flash: