---
id: "CVE-2010-3904"
kind: "vulnerability"
aliases: ["CVE-2010-3904"]
title: "The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in\u2026"
severity: "high"
cvss: 7.8
epss: null
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "linux kernel", "fixed": ["2.6.36"], "affected": "< 2.6.36", "ecosystem": "vendor"}, {"name": "opensuse", "fixed": [], "affected": "= 11.2", "ecosystem": "vendor"}, {"name": "opensuse", "fixed": [], "affected": "= 11.3", "ecosystem": "vendor"}, {"name": "suse linux enterprise desktop", "fixed": [], "affected": "= 11", "ecosystem": "vendor"}, {"name": "suse linux enterprise real time extension", "fixed": [], "affected": "= 11", "ecosystem": "vendor"}, {"name": "suse linux enterprise server", "fixed": [], "affected": "= 11", "ecosystem": "vendor"}, {"name": "canonical ubuntu linux", "fixed": [], "affected": "= 6.06", "ecosystem": "vendor"}, {"name": "canonical ubuntu linux", "fixed": [], "affected": "= 8.04", "ecosystem": "vendor"}, {"name": "canonical ubuntu linux", "fixed": [], "affected": "= 9.04", "ecosystem": "vendor"}, {"name": "canonical ubuntu linux", "fixed": [], "affected": "= 9.10", "ecosystem": "vendor"}, {"name": "canonical ubuntu linux", "fixed": [], "affected": "= 10.04", "ecosystem": "vendor"}, {"name": "canonical ubuntu linux", "fixed": [], "affected": "= 10.10", "ecosystem": "vendor"}, {"name": "redhat enterprise linux", "fixed": [], "affected": "= 5.0", "ecosystem": "vendor"}, {"name": "redhat enterprise linux", "fixed": [], "affected": "= 6.0", "ecosystem": "vendor"}, {"name": "vmware esxi", "fixed": [], "affected": "= 3.5", "ecosystem": "vendor"}, {"name": "vmware esxi", "fixed": [], "affected": "= 4.0", "ecosystem": "vendor"}, {"name": "vmware esxi", "fixed": [], "affected": "= 4.1", "ecosystem": "vendor"}, {"name": "vmware esxi", "fixed": [], "affected": "= 5.0", "ecosystem": "vendor"}, {"name": "Linux Kernel", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "infrastructure", "kernel", "linux", "self-hosted"]
not_affected_if: ["managed-hosting", "rds-module-not-loaded"]
published_at: "2010-12-06T20:13:00+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-24T00:09:51+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-3904", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2010-3904", "first_seen_at": "2026-10-23T22:29:04+00:00"}]
---

# The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in…

The Linux kernel's Reliable Datagram Sockets (RDS) code does not validate input properly in sendmsg and recvmsg. A local user can use crafted calls to gain elevated privileges, which can mean full root on the machine.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:linux kernel affected < 2.6.36 fixed 2.6.36
- vendor:opensuse affected = 11.2 fixed ?
- vendor:opensuse affected = 11.3 fixed ?
- vendor:suse linux enterprise desktop affected = 11 fixed ?
- vendor:suse linux enterprise real time extension affected = 11 fixed ?
- vendor:suse linux enterprise server affected = 11 fixed ?
- vendor:canonical ubuntu linux affected = 6.06 fixed ?
- vendor:canonical ubuntu linux affected = 8.04 fixed ?
- vendor:canonical ubuntu linux affected = 9.04 fixed ?
- vendor:canonical ubuntu linux affected = 9.10 fixed ?
- vendor:canonical ubuntu linux affected = 10.04 fixed ?
- vendor:canonical ubuntu linux affected = 10.10 fixed ?
- vendor:redhat enterprise linux affected = 5.0 fixed ?
- vendor:redhat enterprise linux affected = 6.0 fixed ?
- vendor:vmware esxi affected = 3.5 fixed ?
- vendor:vmware esxi affected = 4.0 fixed ?
- vendor:vmware esxi affected = 4.1 fixed ?
- vendor:vmware esxi affected = 5.0 fixed ?
- vendor:Linux Kernel affected ? fixed ?

## Fix

Upgrade to a kernel release that includes the RDS input validation fix; the sources do not name the fixed version. CISA says the affected product is end-of-life and should be disconnected if still in use.

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2010-3904
- 2026-10-23T22:29:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2010-3904

## From the sources

Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.

CISA required action: The impacted product is end-of-life and should be disconnected if still in use.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_