Back to CVE records
High 7.8Known exploited (CISA KEV)Published Dec 6, 2010
CVE-2010-3904The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from u…
Updated under an hour ago ()
Does this affect you?
It affects linux_kernel and 7 other products. Add what you run to find out whether that includes you.
CISA lists it as known exploited since May 12, 2023; federal agencies had to remediate by Jun 2, 2023. Treat that date as your deadline.
Do this next
Start free and add your stack
Free account, 1 product
The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.
- CVSS
- 7.8 HIGH (v3.1, CISA ADP)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Added to CISA KEV May 12, 2023; federal remediation due Jun 2, 2023The impacted product is end-of-life and should be disconnected if still in use.
- EPSS (exploitation in the next 30 days)
- 15.86% (percentile 97)
- Assigned by
- canonical
- NVD analysis
- Analyzed
- Record last updated
- Oct 22, 2025
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
linux linux_kernel linux:linux_kernel | before 2.6.36 | NVD |
opensuse opensuse opensuse:opensuse | 11.2; 11.3 | NVD |
suse linux_enterprise_desktop suse:linux_enterprise_desktop | 11 | NVD |
suse linux_enterprise_real_time_extension suse:linux_enterprise_real_time_extension | 11 | NVD |
suse linux_enterprise_server suse:linux_enterprise_server | 11 | NVD |
canonical ubuntu_linux canonical:ubuntu_linux | 6.06; 8.04; 9.04; 9.10; 10.04; 10.10 | NVD |
redhat enterprise_linux redhat:enterprise_linux | 5.0; 6.0 | NVD |
vmware esxi vmware:esxi | 3.5; 4.0; 4.1; 5.0 | NVD |
References
- http://www.kb.cert.org/vuls/id/362983third-party-advisory, x-refsource-cert-vn, us-government-resource
- http://www.vsecurity.com/download/tools/linux-rds-exploit.cx-refsource-misc, broken-link
- http://www.ubuntu.com/usn/USN-1000-1vendor-advisory, x-refsource-ubuntu, third-party-advisory
- http://www.securityfocus.com/archive/1/520102/100/0/threadedmailing-list, x-refsource-bugtraq, broken-link, third-party-advisory, vdb-entry
- http://secunia.com/advisories/46397third-party-advisory, x-refsource-secunia, broken-link
- http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=799c10559d60f159ab2232203f222f18fa3c4a5fx-refsource-confirm, broken-link
- https://www.exploit-db.com/exploits/44677/exploit, x-refsource-exploit-db, third-party-advisory, vdb-entry
- http://securitytracker.com/id?1024613vdb-entry, x-refsource-sectrack, broken-link, third-party-advisory
- http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.htmlvendor-advisory, x-refsource-suse, mailing-list, third-party-advisory
- http://www.redhat.com/support/errata/RHSA-2010-0842.htmlvendor-advisory, x-refsource-redhat, broken-link, third-party-advisory
- http://www.vupen.com/english/advisories/2011/0298vdb-entry, x-refsource-vupen, broken-link, third-party-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=642896x-refsource-confirm, issue-tracking, patch, third-party-advisory
- http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00004.htmlvendor-advisory, x-refsource-suse, mailing-list, third-party-advisory
- http://www.vmware.com/security/advisories/VMSA-2011-0012.htmlx-refsource-confirm, third-party-advisory
- http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36x-refsource-confirm, broken-link
- http://www.vsecurity.com/resources/advisory/20101019-1/x-refsource-misc, broken-link
- http://www.redhat.com/support/errata/RHSA-2010-0792.htmlvendor-advisory, x-refsource-redhat, broken-link, third-party-advisory
- http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00008.htmlvendor-advisory, x-refsource-suse, mailing-list, third-party-advisory
- http://packetstormsecurity.com/files/155751/vReliable-Datagram-Sockets-RDS-rds_page_copy_user-Privilege-Escalation.htmlx-refsource-misc, exploit, third-party-advisory, vdb-entry
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3904us-government-resource
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.