CVE-2010-3904
KEVLinux Kernel Improper Input Validation Vulnerability
Description
Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.
The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.
CVSS 3.1 vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HPublishedDec 6, 2010
Last modifiedJun 16, 2026
Added to KEVMay 12, 2023
Remediation dueJun 2, 2023
References
- git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=799c10559d60f159ab2232203f222f18fa3c4a5fBroken Link
- lists.opensuse.org/opensuse-security-announce/2010-10/msg00008.htmlMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2010-11/msg00004.htmlMailing ListThird Party Advisory
- lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.htmlMailing ListThird Party Advisory
- packetstormsecurity.com/files/155751/vReliable-Datagram-Sockets-RDS-rds_page_copy_user-Privilege-Escalation.htmlExploitThird Party Advisory
- secunia.com/advisories/46397Broken LinkThird Party Advisory
- securitytracker.com/id?1024613Broken LinkThird Party Advisory
- kb.cert.org/vuls/id/362983Third Party AdvisoryUS Government Resource
- kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36Broken Link
- redhat.com/support/errata/RHSA-2010-0792.htmlBroken LinkThird Party Advisory
- redhat.com/support/errata/RHSA-2010-0842.htmlBroken LinkThird Party Advisory
- securityfocus.com/archive/1/520102/100/0/threadedBroken LinkThird Party Advisory
0 recent articles mention this CVE
71
Risk assessment · High
Actively exploited. Patch immediately.
- Exploitation
- Confirmed in the wild (CISA KEV)
- Federal remediation deadline
- Overdue by 1243 days
- CVSS
- 7.8 HIGH
- EPSS (30-day exploit probability)
- 15.9% · top 3% of all CVEs
- Weakness
- CWE-1284
Recommended actions
- 1.The impacted product is end-of-life and should be disconnected if still in use.
- 2.Treat as emergency change: patch or isolate internet-facing instances first.
- 3.Hunt for compromise: review logs for the disclosure window, not just from the patch date.
Assessment is derived automatically from the live signals above; verify against your own asset inventory.