Array index error in arch/mips/kernel/scall64-o32.S in the Linux kernel before 2.6.28-rc8 on 64-bit MIPS platforms allows local users to cause a denial of service (system crash) via an o32 syscall with a small syscall number, which leads to an attempted read operation outside the bounds of the syscall table.
| Software | From | Fixed in |
|---|---|---|
| linux / linux_kernel | 2.6.28-rc4 | 2.6.28-rc4.x |
| linux / linux_kernel | - | 2.6.28.x |
| linux / linux_kernel | 2.6.28-rc5 | 2.6.28-rc5.x |
| linux / linux_kernel | 2.6.28-rc1 | 2.6.28-rc1.x |
| linux / linux_kernel | 2.6.28-rc7 | 2.6.28-rc7.x |
| linux / linux_kernel | 2.6.28-rc6 | 2.6.28-rc6.x |
| linux / linux_kernel | 2.6.28-rc3 | 2.6.28-rc3.x |
| linux / linux_kernel | 2.6.28-rc2 | 2.6.28-rc2.x |
| debian / debian_linux | 4.0 | 4.0.x |