CVE-2010-3865 describes an integer overflow in the Linux kernel's Reliable Datagram Sockets (RDS) functionality, specifically within the rds_rdma_pages function, affecting Linux, openSUSE, and SUSE distributions. This vulnerability carries a CVSS score of 7.2, indicating high severity, as a local attacker can exploit it with low complexity to cause a denial of service (system crash) and potentially execute arbitrary code. Despite its potential impact, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this decade-old flaw.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2.6.36CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
11.2CPE matchmatch criteria | cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:* | ||
11.3CPE matchmatch criteria | cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:* | ||
11CPE matchmatch criteria | cpe:2.3:o:suse:linux_enterprise_high_availability_extension:11:sp1:*:*:*:*:*:* | ||
11CPE matchmatch criteria | cpe:2.3:o:suse:linux_enterprise_real_time:11:sp1:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.5 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
CVE-2010-3865
Sep 8, 2020Integer overflow in the rds_rdma_pages function in net/rds/rdma.c in the Linux kernel allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted iovec struct in a Reliable Datagram Sockets (RDS) request which triggers a buffer overflow.
Jan 2, 2011kernel: iovec integer overflow in net/rds/rdma.c
Oct 29, 2010