Live › vulnerability › CVE-2010-3904
Go to dashboardThe Linux kernel's Reliable Datagram Sockets (RDS) code does not validate input properly in sendmsg and recvmsg. A local user can use crafted calls to gain elevated privileges, which can mean full root on the machine.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
The impacted product is end-of-life and should be disconnected if still in use.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| linux kernel | vendor | < 2.6.36 | 2.6.36 |
| opensuse | vendor | = 11.2 | – |
| opensuse | vendor | = 11.3 | – |
| suse linux enterprise desktop | vendor | = 11 | – |
| suse linux enterprise real time extension | vendor | = 11 | – |
| suse linux enterprise server | vendor | = 11 | – |
| canonical ubuntu linux | vendor | = 6.06 | – |
| canonical ubuntu linux | vendor | = 8.04 | – |
| canonical ubuntu linux | vendor | = 9.04 | – |
| canonical ubuntu linux | vendor | = 9.10 | – |
| canonical ubuntu linux | vendor | = 10.04 | – |
| canonical ubuntu linux | vendor | = 10.10 | – |
| redhat enterprise linux | vendor | = 5.0 | – |
| redhat enterprise linux | vendor | = 6.0 | – |
| vmware esxi | vendor | = 3.5 | – |
| vmware esxi | vendor | = 4.0 | – |
| vmware esxi | vendor | = 4.1 | – |
| vmware esxi | vendor | = 5.0 | – |
| Linux Kernel | vendor | – | – |
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.
CISA required action: The impacted product is end-of-life and should be disconnected if still in use.
This page as .md · .json · in your agent: get_signal("CVE-2010-3904")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.