{"schema":"threatline.record/2","record":{"id":"CVE-2010-3904","aliases":[],"summary":"Linux Kernel Improper Input Validation Vulnerability","details":"Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.","categories":["Operating systems"],"product":"Kernel","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2010-3904","source_modified_at":"2025-10-22T00:05:50.418Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}],"defaultStatus":null}],"fixed_versions":[],"cvss":7.8,"severity":"High","kev":{"listed":true,"date_added":"2023-05-12","due_date":"2023-06-02","required_action":"The impacted product is end-of-life and should be disconnected if still in use.","ransomware_campaign_use":"Unknown"},"epss":{"probability":0.15861,"percentile":0.96882,"score_date":"2026-10-23"},"published_at":"2010-12-06T20:00:00.000Z","modified_at":"2025-10-22T00:05:50.418Z","provenance":[{"source":"CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T17:00:09.9001Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2010-3904","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2025-10-22T00:05:50.418Z"},{"source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/rds_rds_page_copy_user_priv_esc.rb","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2010-10-20"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/44677","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2018-05-21"},{"source":"Exploit-DB","url":"https://www.exploit-db.com/exploits/15285","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2010-10-19"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2010-3904","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CISA KEV","CVE List","Metasploit","Exploit-DB","EPSS"],"references":[{"url":"https://lkml.iu.edu/hypermail/linux/kernel/1601.3/06474.html","source":"CISA KEV"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-3904","source":"CISA KEV"},{"source":"CVE List","url":"https://www.exploit-db.com/exploits/44677/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"source":"CVE List","url":"https://bugzilla.redhat.com/show_bug.cgi?id=642896","tags":["x_refsource_CONFIRM","x_transferred"]},{"source":"CVE List","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-3904","tags":["government-resource"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CISA ADP","ssvc":{"exploitation":"active","automatable":"no","technical_impact":"total","assessed_at":"2025-02-07T12:31:23.893469Z"},"exploits":[{"source":"Metasploit","kind":"Exploit module","name":"Reliable Datagram Sockets (RDS) rds_page_copy_user Privilege Escalation","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/rds_rds_page_copy_user_priv_esc.rb","date":"2010-10-20","added":"2026-05-25","check":true},{"source":"Exploit-DB","kind":"Local exploit","name":"Linux 2.6.30 < 2.6.36-rc8 - Reliable Datagram Sockets (RDS) Privilege Escalation (Metasploit)","url":"https://www.exploit-db.com/exploits/44677","date":"2018-05-21","added":"2018-05-21","verified":true},{"source":"Exploit-DB","kind":"Local exploit","name":"Linux 2.6.30 < 2.6.36-rc8 - Reliable Datagram Sockets (RDS) Privilege Escalation (Metasploit)","url":"https://www.exploit-db.com/exploits/44677","date":"2018-05-21","added":"2018-05-21","verified":true},{"source":"Exploit-DB","kind":"Local exploit","name":"Linux Kernel 2.6.36-rc8 - 'RDS Protocol' Local Privilege Escalation","url":"https://www.exploit-db.com/exploits/15285","date":"2010-10-19","added":"2010-10-19","verified":true}],"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"vendor and product","confidence":"heuristic","reviewed":false},"change_timestamp":"2025-10-22T00:05:50.418Z","content_hash":"b5244753a63916bb288e3d9f5a86684179cf8b0acd52a5494ad629bece186be5"}}