Search/CVE-2010-3904
● CVE — High

CVE-2010-3904

Vendorsuse, linux, canonical, redhat, opensuseProductlinux enterprise desktop, linux enterprise server, linux kernel, ubuntu linux, enterprise linux, linux enterprise real time extension, opensuse, esxiDiscoveredDec 6, 2010UpdatedApr 21, 2026

The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.

View graph Watch Export
CVSS v3.1
7.8 HIGH
EPSS
15.9%
probability of exploitation in 30 days
CISA KEV
Listed
confirmed active exploitation
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
EPSS Trend
Aug 16, 2026 → Oct 22, 2026
▲ 3.70pp
12.2% → 15.9% over 6 tracked changes
CVSS v3.1 Detail
Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
ConfidentialityHIGH
IntegrityHIGH
AvailabilityHIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Connections
9 relationships
Timeline
disclosure → media coverage
Dec 6, 2010
Disclosure — published as a CVE record. · last revised by NVD Apr 21, 2026
Public PoC (1)
github.com/redhatkaty/-cve-2010-3904-report
Unverified third-party code — review before executing.