← CVE Radar
CVE-2010-3904Linux Kernel Improper Input Validation Vulnerability
The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.
7.8 HIGHEPSS 15.86%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.8 | HIGH | 3.1NVD | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| 7.2 | HIGH | 2.0NVD | AV:L/AC:L/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due Jun 2, 2023
The impacted product is end-of-life and should be disconnected if still in use.
Details
- CVE ID
- CVE-2010-3904
- Status
- Analyzed
- Assigner (CNA)
- canonical
- Published
- Dec 6, 2010
- Last modified
- 2026-06-16 23:23 UTC
Affected Products
From NVD CPE configurations.
linuxlinux kernel1 version range
- before 2.6.36
opensuseopensuse2 version ranges
- 11.2
- 11.3
suselinux enterprise desktop1 version range
- 11 sp1
suselinux enterprise real time extension1 version range
- 11 sp1
suselinux enterprise server1 version range
- 11 sp1
canonicalubuntu linux6 version ranges
- 6.06
- 8.04
- 9.04
- 9.10
- 10.04
- 10.10
redhatenterprise linux2 version ranges
- 5.0
- 6.0
vmwareesxi4 version ranges
- 3.5
- 4.0
- 4.1
- 5.0
References
- git.kernel.org http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=799c10559d60f159ab2232203f222f18fa3c4a5f
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00008.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00004.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html
- packetstormsecurity.com http://packetstormsecurity.com/files/155751/vReliable-Datagram-Sockets-RDS-rds_page_copy_user-Privilege-Escalation.html
- secunia.com http://secunia.com/advisories/46397
- securitytracker.com http://securitytracker.com/id?1024613
- kb.cert.org http://www.kb.cert.org/vuls/id/362983
- kernel.org http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36
- redhat.com http://www.redhat.com/support/errata/RHSA-2010-0792.html
- redhat.com http://www.redhat.com/support/errata/RHSA-2010-0842.html
- securityfocus.com http://www.securityfocus.com/archive/1/520102/100/0/threaded
- ubuntu.com http://www.ubuntu.com/usn/USN-1000-1
- vmware.com http://www.vmware.com/security/advisories/VMSA-2011-0012.html
- vsecurity.com http://www.vsecurity.com/download/tools/linux-rds-exploit.c
- vsecurity.com http://www.vsecurity.com/resources/advisory/20101019-1/
- vupen.com http://www.vupen.com/english/advisories/2011/0298
- bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=642896
- exploit-db.com https://www.exploit-db.com/exploits/44677/
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3904