Array index error in arch/mips/kernel/scall64-o32.S in the Linux kernel before 2.6.28-rc8 on 64-bit MIPS platforms allows local users to cause a denial of service (system crash) via an o32 syscall with a small syscall number, which leads to an attempted read operation outside the bounds of the syscall table.
CVE-2008-5701
This CVE was only ever scored under CVSS v2.0. NVD CVSS v2.0 base 4.7 — v2 rates that MEDIUM (v2 bands: LOW 0.0–3.9 / MEDIUM 4.0–6.9 / HIGH 7.0–10.0; v2 has no CRITICAL band). Vector AV:L/AC:M/Au:N/C:N/I:N/A:C. CVSS v2 is an older, coarser metric than v3.1/v4.0 (no Scope, no User Interaction, no Attack Requirements), so it is not directly comparable to a v3 or v4 score. NVD has never re-scored this record under v3. EPSS predicts 0.4% exploitation probability in the next 30 days, which is reflected in EG Risk but does not lift the v2 base. Confidence: LOW.
- Lower severity and no public exploit yet
No vendor fix yet — apply a workaround or compensating control (WAF / firewall / segmentation) and watch for a patch.
- CVSS v2.0 (legacy)
- 4.7MEDIUMNVD never assigned a CVSS v3 rating to this CVE
- EG Score
- 4.7(low)
- EG Risk
- 26(Track)EG Risk 26/100SSVC: Track
EG Risk is EchelonGraph's 0–100 priority score: it fuses intrinsic severity with real-world exploitation and automatability so you can rank equal-severity CVEs and fix the most dangerous first. Higher = act sooner. Distinct from the 0–10 EG Score (severity).
How it’s computedSeverity47% × 45%Exploitation0% × 40%Automatability30% × 15%Action: Routine — remediate on your standard cadence. - EPSS PROB
- 0%
- EPSS %ILE
- 33%
- KEV
- Not listed
Published
December 22, 2008
Last Modified
April 23, 2026
References (20)
- cve@mitrehttp://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=e807f9574e37a3f202e677feaaad1b7c5d2c0db8
- cve@mitrehttp://openwall.com/lists/oss-security/2008/12/09/1
- cve@mitrehttp://secunia.com/advisories/33078
- cve@mitrehttp://secunia.com/advisories/34981
- cve@mitrehttp://secunia.com/advisories/35011
- cve@mitrehttp://www.debian.org/security/2009/dsa-1787
- cve@mitrehttp://www.debian.org/security/2009/dsa-1794
- cve@mitrehttp://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.28-rc8
- cve@mitrehttp://www.securityfocus.com/bid/32716
- cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/47190
- af854a3a-2127-422b-91ae-364da2661108http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.27.y.git%3Ba=commit%3Bh=e807f9574e37a3f202e677feaaad1b7c5d2c0db8
- af854a3a-2127-422b-91ae-364da2661108http://openwall.com/lists/oss-security/2008/12/09/1
- af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/33078
- af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/34981
- af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/35011
Affected Packages
(4 across 1 ecosystem)
Debian:4.0(4)
| Package | Vulnerable range | Fixed in | Dependents |
|---|---|---|---|
| fai-kernels | 1.17 ... 1.17etch1 (27 versions) | 1.17+etch.24etch2 | — |
| linux-2.6 | 2.6.18.dfsg.1-12 ... 2.6.18.dfsg.1-24etch1 (33 versions) | 2.6.18.dfsg.1-24etch2 | — |
| linux-2.6.24 | 2.6.24-5~etchnhalf.1 ... 2.6.24-6~etchnhalf.8 (9 versions) | 2.6.24-6~etchnhalf.8etch1 | — |
| user-mode-linux | 2.6.18-1um-2 ... 2.6.18-1um-2etch4 (25 versions) | 2.6.18-1um-2etch.24etch2 | — |
Data Freshness Timeline
(refreshed 0× in last 7d / 7× in last 30d)
Each row is a source pipeline that fetched or updated this CVE on that date, with what changed. For example, "NVD update" means NVD published or revised its analysis for this CVE; "MITRE cvelistV5" means we ingested or refreshed it from the CNA feed. Most recent first.
Showing the most recent 100 of 106 total refreshes for this CVE.
- 2026-08-15 01:24 UTCEPSS rescore
- 2026-08-08 16:31 UTCEPSS rescore
- 2026-08-07 16:21 UTCEPSS rescore
- 2026-08-06 13:41 UTCEPSS rescore
- 2026-08-05 19:11 UTCEPSS rescore
- 2026-08-04 15:03 UTCEPSS rescore
- 2026-07-30 01:25 UTCEPSS rescore
- 2026-07-26 13:36 UTCEG score recompute▲ 4.70
- 2026-07-25 14:12 UTCEPSS rescore
- 2026-07-24 14:12 UTCEPSS rescore
- 2026-07-23 14:14 UTCEPSS rescore
- 2026-07-23 00:57 UTCEG score recompute
- 2026-07-23 00:35 UTCEG score recompute
- 2026-07-23 00:02 UTCEG score recompute
- 2026-07-22 21:41 UTCEG score recompute
- 2026-07-20 17:03 UTCEPSS rescore
- 2026-07-18 09:59 UTCEPSS rescore
- 2026-07-16 16:58 UTCEPSS rescore
- 2026-07-15 16:54 UTCEPSS rescore
- 2026-07-15 16:54 UTCEPSS rescore
- 2026-07-15 01:55 UTCEPSS rescore
- 2026-07-13 22:25 UTCEPSS rescore
- 2026-07-13 06:07 UTCEPSS rescore
- 2026-07-11 08:22 UTCEPSS rescore
- 2026-07-11 08:22 UTCEPSS rescore
Show 75 moreShow fewer
- 2026-07-09 19:04 UTCEPSS rescore
- 2026-07-08 15:09 UTCEPSS rescore
- 2026-07-06 16:23 UTCEPSS rescore
- 2026-07-06 02:19 UTCEPSS rescore
- 2026-07-06 02:19 UTCEPSS rescore
- 2026-07-05 02:26 UTCEPSS rescore
- 2026-07-05 02:26 UTCEPSS rescore
- 2026-07-04 06:27 UTCEPSS rescore
- 2026-07-02 14:00 UTCEPSS rescore
- 2026-07-01 15:02 UTCEPSS rescore
- 2026-07-01 15:02 UTCEPSS rescore
- 2026-06-30 23:19 UTCEPSS rescore
- 2026-06-29 14:02 UTCEPSS rescore
- 2026-06-29 14:02 UTCEPSS rescore
- 2026-06-28 14:03 UTCEPSS rescore
- 2026-06-28 04:52 UTCEPSS rescore
- 2026-06-27 03:04 UTCEPSS rescore
- 2026-06-25 13:46 UTCEPSS rescore
- 2026-06-25 13:46 UTCEPSS rescore
- 2026-06-24 14:02 UTCEPSS rescore
- 2026-06-24 14:02 UTCEPSS rescore
- 2026-06-23 21:29 UTCEPSS rescore
- 2026-06-23 21:29 UTCEPSS rescore
- 2026-06-22 14:22 UTCEPSS rescore
- 2026-06-22 14:22 UTCEPSS rescore
- 2026-06-21 14:53 UTCEPSS rescore
- 2026-06-21 14:53 UTCEPSS rescore
- 2026-06-21 01:56 UTCEPSS rescore
- 2026-06-21 01:56 UTCEPSS rescore
- 2026-06-19 19:22 UTCEPSS rescore
- 2026-06-19 19:22 UTCEPSS rescore
- 2026-06-18 17:49 UTCEPSS rescore
- 2026-06-18 17:49 UTCEPSS rescore
- 2026-06-17 17:49 UTCEPSS rescore
- 2026-06-17 17:49 UTCEPSS rescore
- 2026-06-16 17:49 UTCEPSS rescore
- 2026-06-16 17:49 UTCEPSS rescore
- 2026-06-15 17:44 UTCEPSS rescore
- 2026-06-14 23:13 UTCEPSS rescore
- 2026-06-13 22:57 UTCEPSS rescore
- 2026-06-12 23:08 UTCEPSS rescore
- 2026-06-12 23:08 UTCEPSS rescore
- 2026-06-11 13:56 UTCEPSS rescore
- 2026-06-10 22:14 UTCEPSS rescore
- 2026-06-10 13:17 UTCEPSS rescore
- 2026-06-08 14:13 UTCEPSS rescore
- 2026-06-07 15:22 UTCEPSS rescore
- 2026-06-05 22:44 UTCEPSS rescore
- 2026-06-05 22:44 UTCEPSS rescore
- 2026-06-05 06:07 UTCEPSS rescore
- 2026-06-04 13:09 UTCEPSS rescore
- 2026-06-04 13:09 UTCEPSS rescore
- 2026-06-02 20:10 UTCEPSS rescore
- 2026-06-02 20:10 UTCEPSS rescore
- 2026-06-01 13:49 UTCEPSS rescore
- 2026-06-01 13:49 UTCEPSS rescore
- 2026-06-01 13:49 UTCEPSS rescore
- 2026-05-31 22:28 UTCEPSS rescore
- 2026-05-31 22:28 UTCEPSS rescore
- 2026-05-31 00:13 UTCEPSS rescore
- 2026-05-31 00:13 UTCEPSS rescore
- 2026-05-30 18:59 UTCEG score recompute
- 2026-05-30 18:59 UTCGHSA enrichment
- 2026-05-29 13:40 UTCEPSS rescore
- 2026-05-28 13:42 UTCEPSS rescore
- 2026-05-28 13:42 UTCEPSS rescore
- 2026-05-28 13:42 UTCEPSS rescore
- 2026-05-27 13:38 UTCEPSS rescore
- 2026-05-27 13:37 UTCEPSS rescore
- 2026-05-26 13:41 UTCEPSS rescore
- 2026-05-26 13:41 UTCEPSS rescore
- 2026-05-26 07:16 UTCEPSS rescore
- 2026-05-26 07:16 UTCEPSS rescore
- 2026-05-24 16:43 UTCEPSS rescore
- 2026-05-22 21:15 UTCEPSS rescore
Frequently asked(4)
What is CVE-2008-5701?
When was CVE-2008-5701 disclosed?
Is CVE-2008-5701 actively exploited?
How do I remediate CVE-2008-5701?
Dependency Blast Radius
See which npm, PyPI, Go, and Maven packages are affected by CVE-2008-5701
Is Your Infrastructure Affected by CVE-2008-5701?
EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.