{"schemaVersion":3,"id":"CVE-2010-3904","aliases":["RHSA-2010:0792"],"status":"published","duplicateOf":null,"title":"Linux Kernel Improper Input Validation Vulnerability","description":"The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.","dates":{"published":"2010-12-06T20:00:00.000Z","modified":"2025-10-22T00:05:50.418Z","reserved":null,"kevAdded":["2023-05-12T00:00:00.000Z"],"kevDue":["2023-06-02T00:00:00.000Z"]},"cvss":{"headline":{"score":7.8,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"CVE.org","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.2,"severity":"high","vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.15861,"percentile":0.96875,"severity":"medium","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":1.3929999999999998,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.14468},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.14583,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.14583,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.14583,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.15737,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.15737,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.15737,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.15737,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.15737,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.15737,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.15737,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.15737,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.15737,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.15737,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.15861,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.15861,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.15861,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.15861,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.15861,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.15861,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.15861,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.15861,"percentile":0.96875}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.14468,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.15737,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.15737,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.15737,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.15737,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.15737,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.15737,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.15737,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.15737,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.15737,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.15737,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.15861,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.15861,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.15861,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.15861,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.15861,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.15861,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.15861,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.15861,"percentile":0.96875}]},"kev":{"state":"listed","entries":[{"source":"cisa","sourceLabel":"CISA","dateAdded":"2023-05-12T00:00:00.000Z","dueDate":"2023-06-02T00:00:00.000Z","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","name":"Linux Kernel Improper Input Validation Vulnerability","description":"Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.","notes":[{"type":"url","href":"https://lkml.iu.edu/hypermail/linux/kernel/1601.3/06474.html","label":"lkml.iu.edu/hypermail/linux/kernel/1601.3/06474.html"},{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2010-3904","label":"nvd.nist.gov/vuln/detail/CVE-2010-3904"}],"vendor":"Linux","product":"Kernel","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}],"listedCount":1,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":true,"entry":{"source":"cisa","sourceLabel":"CISA","dateAdded":"2023-05-12T00:00:00.000Z","dueDate":"2023-06-02T00:00:00.000Z","requiredAction":"The impacted product is end-of-life and should be disconnected if still in use.","name":"Linux Kernel Improper Input Validation Vulnerability","description":"Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.","notes":[{"type":"url","href":"https://lkml.iu.edu/hypermail/linux/kernel/1601.3/06474.html","label":"lkml.iu.edu/hypermail/linux/kernel/1601.3/06474.html"},{"type":"url","href":"https://nvd.nist.gov/vuln/detail/CVE-2010-3904","label":"nvd.nist.gov/vuln/detail/CVE-2010-3904"}],"vendor":"Linux","product":"Kernel","ransomware":false,"ransomwareUse":"Unknown","exploitationType":null}},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_A29A05DB72EFC36C","name":"Exploit Reference (packetstormsecurity.com)","source":"reference","url":"http://packetstormsecurity.com/files/155751/vReliable-Datagram-Sockets-RDS-rds_page_copy_user-Privilege-Escalation.html","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"MSF_EXPLOIT_LINUX_LOCAL_RDS_RDS_PAGE_COPY_USER_PRIV_ESC","name":"Reliable Datagram Sockets (RDS) rds_page_copy_user Privilege Escalation","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/linux/local/rds_rds_page_copy_user_priv_esc.rb","maturity":"weaponized","reliabilityScore":0.8333333333333334,"verified":true,"type":"remote","platforms":[],"requiresAuth":false,"exploitdb":null,"metasploit":{"fullname":"exploit/linux/local/rds_rds_page_copy_user_priv_esc","rank":"500","rankName":"great","postAuth":false,"check":true,"stability":["crash-safe"],"sideEffects":["artifacts-on-disk"],"reliability":["unreliable-session"]}},{"id":"44677","name":"Linux 2.6.30 < 2.6.36-rc8 - Reliable Datagram Sockets (RDS) Privilege Escalation (Metasploit)","source":"exploit-database","url":"https://www.exploit-db.com/exploits/44677","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"local","platforms":["linux"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"local","platform":"linux","file":"exploits/linux/local/44677.rb","codes":["CVE-2010-3904"]},"metasploit":null},{"id":"15285","name":"Linux Kernel 2.6.36-rc8 - 'RDS Protocol' Local Privilege Escalation","source":"exploit-database","url":"https://www.exploit-db.com/exploits/15285","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"local","platforms":["linux"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"local","platform":"linux","file":"exploits/linux/local/15285.c","codes":["CVE-2010-3904"]},"metasploit":null}],"exploitCount":4,"weaknesses":[{"id":"CWE-1284","name":"Improper Validation of Specified Quantity in Input","description":"The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/1284.html"}],"affected":[{"vendor":"canonical","product":"ubuntu_linux","name":"ubuntu linux","label":"ubuntu_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"6.06","noFixRecorded":false,"fixedIn":null},{"text":"8.04","noFixRecorded":false,"fixedIn":null},{"text":"9.04","noFixRecorded":false,"fixedIn":null},{"text":"9.10","noFixRecorded":false,"fixedIn":null},{"text":"10.04","noFixRecorded":false,"fixedIn":null},{"text":"10.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"6.06 | 8.04 | 9.04 | 9.10 | 10.04 | 10.10","eol":{"isEol":true,"eolDate":"2011-06-01T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"6.06","label":"6.06 'Dapper Drake' (LTS)","eolFrom":"2011-06-01T00:00:00.000Z","isLts":true,"isMaintained":false,"latestVersion":"6.06.2"},"product":{"name":"ubuntu","label":"Ubuntu","category":"os"}},"hubHref":"/vendor/canonical/ubuntu_linux"},{"vendor":"linux","product":"linux_kernel","name":"linux kernel","label":"linux_kernel","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 2.6.36","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.6.36","eol":{"isEol":null,"eolDate":null,"matchMethod":"cpe","cycle":null,"product":{"name":"linux","label":"Linux Kernel","category":"os"}},"hubHref":"/vendor/linux/linux_kernel"},{"vendor":"opensuse","product":"opensuse","name":"opensuse","label":"opensuse","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11.2","noFixRecorded":false,"fixedIn":null},{"text":"11.3","noFixRecorded":false,"fixedIn":null}],"versionsText":"11.2 | 11.3","eol":{"isEol":true,"eolDate":"2011-05-12T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"11.2","label":"11.2","eolFrom":"2011-05-12T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":null},"product":{"name":"opensuse","label":"openSUSE","category":"os"}},"hubHref":"/vendor/opensuse/opensuse"},{"vendor":"redhat","product":"enterprise_linux","name":"enterprise linux","label":"enterprise_linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"5.0","noFixRecorded":false,"fixedIn":null},{"text":"6.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"5.0 | 6.0","eol":{"isEol":true,"eolDate":"2017-03-31T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"5","label":"5 (ELS)","eolFrom":"2017-03-31T00:00:00.000Z","isLts":true,"isMaintained":false,"latestVersion":"5.11"},"product":{"name":"rhel","label":"Red Hat Enterprise Linux","category":"os"}},"hubHref":"/vendor/redhat/enterprise_linux"},{"vendor":"redhat","product":"kernel","name":"kernel","label":"kernel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/kernel","purlType":"rpm","versions":[{"text":"< 0:2.6.18-194.17.4.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.6.18-194.17.4.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"kernel-debug","name":"kernel-debug","label":"kernel-debug","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/kernel-debug","purlType":"rpm","versions":[{"text":"< 0:2.6.18-194.17.4.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.6.18-194.17.4.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"kernel-debug-debuginfo","name":"kernel-debug-debuginfo","label":"kernel-debug-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/kernel-debug-debuginfo","purlType":"rpm","versions":[{"text":"< 0:2.6.18-194.17.4.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.6.18-194.17.4.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"kernel-debug-devel","name":"kernel-debug-devel","label":"kernel-debug-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/kernel-debug-devel","purlType":"rpm","versions":[{"text":"< 0:2.6.18-194.17.4.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.6.18-194.17.4.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"kernel-debuginfo","name":"kernel-debuginfo","label":"kernel-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/kernel-debuginfo","purlType":"rpm","versions":[{"text":"< 0:2.6.18-194.17.4.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.6.18-194.17.4.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"kernel-debuginfo-common","name":"kernel-debuginfo-common","label":"kernel-debuginfo-common","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/kernel-debuginfo-common","purlType":"rpm","versions":[{"text":"< 0:2.6.18-194.17.4.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.6.18-194.17.4.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"kernel-devel","name":"kernel-devel","label":"kernel-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/kernel-devel","purlType":"rpm","versions":[{"text":"< 0:2.6.18-194.17.4.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.6.18-194.17.4.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"kernel-doc","name":"kernel-doc","label":"kernel-doc","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/kernel-doc","purlType":"rpm","versions":[{"text":"< 0:2.6.18-194.17.4.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.6.18-194.17.4.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"kernel-headers","name":"kernel-headers","label":"kernel-headers","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/kernel-headers","purlType":"rpm","versions":[{"text":"< 0:2.6.18-194.17.4.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.6.18-194.17.4.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"kernel-kdump","name":"kernel-kdump","label":"kernel-kdump","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/kernel-kdump","purlType":"rpm","versions":[{"text":"< 0:2.6.18-194.17.4.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.6.18-194.17.4.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"kernel-kdump-debuginfo","name":"kernel-kdump-debuginfo","label":"kernel-kdump-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/kernel-kdump-debuginfo","purlType":"rpm","versions":[{"text":"< 0:2.6.18-194.17.4.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.6.18-194.17.4.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"kernel-kdump-devel","name":"kernel-kdump-devel","label":"kernel-kdump-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/kernel-kdump-devel","purlType":"rpm","versions":[{"text":"< 0:2.6.18-194.17.4.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.6.18-194.17.4.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"kernel-PAE","name":"kernel-PAE","label":"kernel-PAE","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/kernel-PAE","purlType":"rpm","versions":[{"text":"< 0:2.6.18-194.17.4.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.6.18-194.17.4.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"kernel-PAE-debuginfo","name":"kernel-PAE-debuginfo","label":"kernel-PAE-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/kernel-PAE-debuginfo","purlType":"rpm","versions":[{"text":"< 0:2.6.18-194.17.4.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.6.18-194.17.4.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"kernel-PAE-devel","name":"kernel-PAE-devel","label":"kernel-PAE-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/kernel-PAE-devel","purlType":"rpm","versions":[{"text":"< 0:2.6.18-194.17.4.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.6.18-194.17.4.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"kernel-xen","name":"kernel-xen","label":"kernel-xen","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/kernel-xen","purlType":"rpm","versions":[{"text":"< 0:2.6.18-194.17.4.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.6.18-194.17.4.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"kernel-xen-debuginfo","name":"kernel-xen-debuginfo","label":"kernel-xen-debuginfo","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/kernel-xen-debuginfo","purlType":"rpm","versions":[{"text":"< 0:2.6.18-194.17.4.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.6.18-194.17.4.el5","eol":null,"hubHref":null},{"vendor":"redhat","product":"kernel-xen-devel","name":"kernel-xen-devel","label":"kernel-xen-devel","ecosystem":"Red Hat","cpePart":null,"purl":"pkg:rpm/redhat/kernel-xen-devel","purlType":"rpm","versions":[{"text":"< 0:2.6.18-194.17.4.el5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0:2.6.18-194.17.4.el5","eol":null,"hubHref":null},{"vendor":"suse","product":"linux_enterprise_desktop","name":"linux enterprise desktop","label":"linux_enterprise_desktop","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11:sp1","noFixRecorded":false,"fixedIn":null}],"versionsText":"11:sp1","eol":null,"hubHref":"/vendor/suse/linux_enterprise_desktop"},{"vendor":"suse","product":"linux_enterprise_real_time_extension","name":"linux enterprise real time extension","label":"linux_enterprise_real_time_extension","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11:sp1","noFixRecorded":false,"fixedIn":null}],"versionsText":"11:sp1","eol":null,"hubHref":"/vendor/suse/linux_enterprise_real_time_extension"},{"vendor":"suse","product":"linux_enterprise_server","name":"linux enterprise server","label":"linux_enterprise_server","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"11:sp1","noFixRecorded":false,"fixedIn":null}],"versionsText":"11:sp1","eol":null,"hubHref":"/vendor/suse/linux_enterprise_server"},{"vendor":"vmware","product":"esxi","name":"ESXi","label":"esxi","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"3.5","noFixRecorded":false,"fixedIn":null},{"text":"4.0","noFixRecorded":false,"fixedIn":null},{"text":"4.1","noFixRecorded":false,"fixedIn":null},{"text":"5.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.5 | 4.0 | 4.1 | 5.0","eol":{"isEol":true,"eolDate":"2016-08-24T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"5.0","label":"5.0","eolFrom":"2016-08-24T00:00:00.000Z","isLts":false,"isMaintained":false,"latestVersion":"5.0 Update 3g"},"product":{"name":"esxi","label":"VMware ESXi","category":"os"}},"hubHref":"/vendor/vmware/esxi"}],"affectedCount":26,"eol":{"hasEol":true,"count":4},"references":[{"url":"http://www.kb.cert.org/vuls/id/362983","label":"www.kb.cert.org/vuls/id/362983","hostname":"www.kb.cert.org","tags":["Third Party Advisory","X Refsource CERT VN","US Government Resource"]},{"url":"http://www.vsecurity.com/download/tools/linux-rds-exploit.c","label":"www.vsecurity.com/download/tools/linux-rds-exploit.c","hostname":"www.vsecurity.com","tags":["X Refsource MISC","Broken Link"]},{"url":"http://www.ubuntu.com/usn/USN-1000-1","label":"www.ubuntu.com/usn/USN-1000-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/520102/100/0/threaded","label":"www.securityfocus.com/archive/1/520102/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/46397","label":"secunia.com/advisories/46397","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Broken Link"]},{"url":"http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=799c10559d60f159ab2232203f222f18fa3c4a5f","label":"git.kernel.org","hostname":"git.kernel.org","tags":["X Refsource CONFIRM","Broken Link"]},{"url":"https://www.exploit-db.com/exploits/44677/","label":"www.exploit-db.com/exploits/44677/","hostname":"www.exploit-db.com","tags":["Exploit","X Refsource EXPLOIT DB","Third Party Advisory","VDB Entry"]},{"url":"http://securitytracker.com/id?1024613","label":"securitytracker.com/id?1024613","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK","Broken Link","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html","label":"lists.opensuse.org/opensuse-security-announce/2011-02/msg00000.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0842.html","label":"www.redhat.com/support/errata/RHSA-2010-0842.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Broken Link","Third Party Advisory"]},{"url":"http://www.vupen.com/english/advisories/2011/0298","label":"www.vupen.com/english/advisories/2011/0298","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Broken Link","Third Party Advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=642896","label":"bugzilla.redhat.com/show_bug.cgi?id=642896","hostname":"bugzilla.redhat.com","tags":["X Refsource CONFIRM","Issue Tracking","Patch","Third Party Advisory","REPORT"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00004.html","label":"lists.opensuse.org/opensuse-security-announce/2010-11/msg00004.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0012.html","label":"www.vmware.com/security/advisories/VMSA-2011-0012.html","hostname":"www.vmware.com","tags":["X Refsource CONFIRM","Third Party Advisory"]},{"url":"http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36","label":"www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.36","hostname":"www.kernel.org","tags":["X Refsource CONFIRM","Broken Link"]},{"url":"http://www.vsecurity.com/resources/advisory/20101019-1/","label":"www.vsecurity.com/resources/advisory/20101019-1/","hostname":"www.vsecurity.com","tags":["X Refsource MISC","Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0792.html","label":"www.redhat.com/support/errata/RHSA-2010-0792.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Broken Link","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00008.html","label":"lists.opensuse.org/opensuse-security-announce/2010-10/msg00008.html","hostname":"lists.opensuse.org","tags":["Vendor Advisory","X Refsource SUSE","Mailing List","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/155751/vReliable-Datagram-Sockets-RDS-rds_page_copy_user-Privilege-Escalation.html","label":"packetstormsecurity.com/files/…","hostname":"packetstormsecurity.com","tags":["X Refsource MISC","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3904","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3904","hostname":"www.cisa.gov","tags":["Government Resource","US Government Resource"]},{"url":"https://access.redhat.com/errata/RHSA-2010:0792","label":"access.redhat.com/errata/RHSA-2010:0792","hostname":"access.redhat.com","tags":["Advisory"]},{"url":"http://www.redhat.com/security/updates/classification/#important","label":"www.redhat.com/security/updates/classification/","hostname":"www.redhat.com","tags":["ARTICLE"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0792.json","label":"security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0792.json","hostname":"security.access.redhat.com","tags":["Advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2010-3904","label":"access.redhat.com/security/cve/CVE-2010-3904","hostname":"access.redhat.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2010-3904","label":"www.cve.org/CVERecord?id=CVE-2010-3904","hostname":"www.cve.org","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3904","label":"nvd.nist.gov/vuln/detail/CVE-2010-3904","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","label":"www.cisa.gov/known-exploited-vulnerabilities-catalog","hostname":"www.cisa.gov","tags":["ARTICLE"]}],"lineage":{"upstream":[],"downstream":["RHSA-2010:0842"],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2010-12-06T20:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"kev-added","date":"2023-05-12T00:00:00.000Z","label":"Added to CISA KEV","detail":"Linux Kernel Improper Input Validation Vulnerability","source":"cisa"},{"kind":"kev-due","date":"2023-06-02T00:00:00.000Z","label":"CISA remediation due","detail":"The impacted product is end-of-life and should be disconnected if still in use.","source":"cisa"},{"kind":"modified","date":"2025-10-22T00:05:50.418Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":85,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T06:33:06.213Z","stale":false,"partial":false}}