ZeroDay Findings
Sign inSign up

Findings

CVE-2010-3904

Linux Kernel Improper Input Validation Vulnerability

Published Dec 6, 2010 · updated Jun 16, 2026 · linux linux kernel

The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.

Timeline

Detection, updates, and resolution for this record.

  1. Dec 6, 2010 · Catalog

    Detected

    The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.

  2. May 12, 2023 · CISA KEV

    Known exploited

    The impacted product is end-of-life and should be disconnected if still in use.

  3. Jun 2, 2023 · CISA KEV

    Remediation due

    The impacted product is end-of-life and should be disconnected if still in use.

  4. Jun 16, 2026 · Catalog

    Updated

    The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.

Required action

The impacted product is end-of-life and should be disconnected if still in use.

CISA due date Jun 2, 2023

Affected

  • cpe canonical/ubuntu linux6.06
  • cpe canonical/ubuntu linux8.04
  • cpe linux/linux kernelversion unspecified
  • cpe opensuse/opensuse11.2
  • cpe opensuse/opensuse11.3
  • cpe redhat/enterprise linux5.0
  • cpe suse/linux enterprise desktop11
  • cpe suse/linux enterprise real time extension11
  • cpe suse/linux enterprise server11
  • cpe vmware/esxi3.5
  • vendor Linux Kernelversion unspecified

Sources

  • CISA KEVCVE-2010-3904

    Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.

    cisa.gov
  • CVE.orgCVE-2010-3904

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2010-3904

    30-day exploitation probability 15.7%

    first.org
  • Exploit Database15285

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Exploit Database44677

    Public archive entry. The exploit body is not stored here.

    exploit-db.com
  • Metasploit Modulesexploit_linux/local/rds_rds_page_copy_user_priv_esc

    Public module reference (great). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDCVE-2010-3904

    The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sen

    nvd.nist.gov

References