Dashboard / CVE-2010-3904

CVE-2010-3904

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 0/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.

CISA Known Exploited Vulnerability

Vendor / Product Linux — Kernel
Date Added 2023-05-12
Remediation Due 2023-06-02
https://lkml.iu.edu/hypermail/linux/kernel/1601.3/06474.html; https://nvd.nist.gov/vuln/detail/CVE-2010-3904

Weakness Classification (1)

Affected Software (18)

VendorProductVersion
canonical ubuntu_linux 6.06
canonical ubuntu_linux 8.04
canonical ubuntu_linux 9.04
canonical ubuntu_linux 9.10
canonical ubuntu_linux 10.04
canonical ubuntu_linux 10.10
linux linux_kernel < 2.6.36
opensuse opensuse 11.2
opensuse opensuse 11.3
redhat enterprise_linux 5.0
redhat enterprise_linux 6.0
suse linux_enterprise_desktop 11
suse linux_enterprise_real_time_extension 11
suse linux_enterprise_server 11
vmware esxi 3.5
vmware esxi 4.0
vmware esxi 4.1
vmware esxi 5.0

References & Advisories (20)

http://www.kb.cert.org/vuls/id/362983
Third Party Advisory US Government Resource
https://bugzilla.redhat.com/show_bug.cgi?id=642896
Issue Tracking Patch Third Party Advisory
https://www.exploit-db.com/exploits/44677/
Exploit Third Party Advisory VDB Entry
http://securitytracker.com/id?1024613
Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/520102/100/0/threaded
Broken Link Third Party Advisory VDB Entry
http://secunia.com/advisories/46397
Broken Link Third Party Advisory
http://www.vupen.com/english/advisories/2011/0298
Broken Link Third Party Advisory

Bug Bounty Relevance

0 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

No EPSS data available

Intelligence Sources

kev ref →

External Links