CVEvulnerability

CVE-2010-3904

7.8 HIGH Known exploited Published 2010-12-06 Modified 2026-06-16 Official page ↗

CISA Known Exploited Vulnerability

Linux Kernel Improper Input Validation Vulnerability — Linux Kernel

Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.

Added to KEV: 2023-05-12
Remediation due: 2023-06-02
Ransomware use: Unknown
Required action: The impacted product is end-of-life and should be disconnected if still in use.
Notes: https://lkml.iu.edu/hypermail/linux/kernel/1601.3/06474.html; https://nvd.nist.gov/vuln/detail/CVE-2010-3904

Status: Analyzed
Published: 2010-12-06
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 3.1 ([email protected]): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected]): 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses: CWE-1284

Description

The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.

Affected configurations

• linux linux kernel (< 2.6.36) • opensuse opensuse 11.2 • opensuse opensuse 11.3 • suse linux enterprise desktop 11 • suse linux enterprise real time extension 11 • suse linux enterprise server 11 • canonical ubuntu linux 6.06 • canonical ubuntu linux 8.04 • canonical ubuntu linux 9.04 • canonical ubuntu linux 9.10 • canonical ubuntu linux 10.04 • canonical ubuntu linux 10.10 • redhat enterprise linux 5.0 • redhat enterprise linux 6.0 • vmware esxi 3.5 • vmware esxi 4.0 • vmware esxi 4.1 • vmware esxi 5.0

Related

Weakness · CWE (1)

CWE-1284 Improper Validation of Specified Quantity in Input weakness

References

http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=799c10559d60f159ab2232203f222f18fa3c4a5f Broken Link
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00008.html Mailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00004.html Mailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html Mailing List, Third Party Advisory
http://packetstormsecurity.com/files/155751/vReliable-Datagram-Sockets-RDS-rds_page_copy_user-Privilege-Escalation.html Exploit, Third Party Advisory, VDB Entry
http://secunia.com/advisories/46397 Broken Link, Third Party Advisory
http://securitytracker.com/id?1024613 Broken Link, Third Party Advisory, VDB Entry
http://www.kb.cert.org/vuls/id/362983 Third Party Advisory, US Government Resource
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36 Broken Link
http://www.redhat.com/support/errata/RHSA-2010-0792.html Broken Link, Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2010-0842.html Broken Link, Third Party Advisory
http://www.securityfocus.com/archive/1/520102/100/0/threaded Broken Link, Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-1000-1 Third Party Advisory
http://www.vmware.com/security/advisories/VMSA-2011-0012.html Third Party Advisory
http://www.vsecurity.com/download/tools/linux-rds-exploit.c Broken Link
http://www.vsecurity.com/resources/advisory/20101019-1/ Broken Link
http://www.vupen.com/english/advisories/2011/0298 Broken Link, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=642896 Issue Tracking, Patch, Third Party Advisory
https://www.exploit-db.com/exploits/44677/ Exploit, Third Party Advisory, VDB Entry
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=799c10559d60f159ab2232203f222f18fa3c4a5f Broken Link
http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00008.html Mailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00004.html Mailing List, Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html Mailing List, Third Party Advisory
http://packetstormsecurity.com/files/155751/vReliable-Datagram-Sockets-RDS-rds_page_copy_user-Privilege-Escalation.html Exploit, Third Party Advisory, VDB Entry
http://secunia.com/advisories/46397 Broken Link, Third Party Advisory
http://securitytracker.com/id?1024613 Broken Link, Third Party Advisory, VDB Entry
http://www.kb.cert.org/vuls/id/362983 Third Party Advisory, US Government Resource
http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36 Broken Link
http://www.redhat.com/support/errata/RHSA-2010-0792.html Broken Link, Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2010-0842.html Broken Link, Third Party Advisory
http://www.securityfocus.com/archive/1/520102/100/0/threaded Broken Link, Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-1000-1 Third Party Advisory
http://www.vmware.com/security/advisories/VMSA-2011-0012.html Third Party Advisory
http://www.vsecurity.com/download/tools/linux-rds-exploit.c Broken Link
http://www.vsecurity.com/resources/advisory/20101019-1/ Broken Link
http://www.vupen.com/english/advisories/2011/0298 Broken Link, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=642896 Issue Tracking, Patch, Third Party Advisory
https://www.exploit-db.com/exploits/44677/ Exploit, Third Party Advisory, VDB Entry
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3904 US Government Resource