Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2010-3904

84
FAUCET Score

CVE-2010-3904 is a local privilege escalation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation within the Linux kernel (versions prior to 2.6.36). It allows local users to gain root privileges by manipulating sendmsg and recvmsg system calls, affecting various Linux distributions including Canonical, Red Hat, SUSE, and VMware. This vulnerability carries a high CVSS score of 7.8, indicating a severe risk. It can be exploited locally with low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. The vulnerability is actively exploited in the wild, as confirmed by its inclusion in CISA's KEV catalog. Publicly available exploit modules exist in Metasploit and ExploitDB, and it has garnered significant community discussion and media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
< 2.6.36CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
11.2CPE matchmatch criteria
cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*
11.3CPE matchmatch criteria
cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*
11CPE matchmatch criteria
cpe:2.3:o:suse:linux_enterprise_desktop:11:sp1:*:*:*:*:*:*
11CPE matchmatch criteria
cpe:2.3:o:suse:linux_enterprise_real_time_extension:11:sp1:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.8HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
12.16%
Probability of exploitation in next 30 days
EPSS Percentile
95.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-26
Model: v2026.06.15
Added to KEV · May 12, 2023
Metasploit: Reliable Datagram Sockets (RDS) rds_page_copy_user Privilege Escalation · Oct 20, 2010
ExploitDB: EDB-44677 · May 21, 2018
This CVE's current EPSS score of 0.1216 is in the 99th percentile among its peer group of 16,994 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (3)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: kernel-0:2.6.18-194.17.4.el5
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: kernel-0:2.6.32-71.7.1.el6
View patch
redhatpatch availablevia nvd_reference
View patch

Vendor Advisories (1)

redhatCVE-2010-3904Important

kernel: RDS sockets local privilege escalation

Oct 19, 2010

References

cisa.gov / known-exploited-vulnerabilities-catalog
US Government Resource
git.kernel.org
Broken Link
lists.opensuse.org / opensuse-security-announce/2010-10/msg00008.html
Mailing ListThird Party Advisory
lists.opensuse.org / opensuse-security-announce/2010-11/msg00004.html
Mailing ListThird Party Advisory
lists.opensuse.org / opensuse-security-announce/2011-02/msg00000.html
Mailing ListThird Party Advisory
packetstormsecurity.com / files/155751/vReliable-Datagram-Sockets-RDS-rds_page_copy_user-Privilege-Escalation.html
ExploitThird Party AdvisoryVDB Entry
bugzilla.redhat.com / show_bug.cgi
Issue TrackingPatchThird Party Advisory
secunia.com / advisories/46397
Broken LinkThird Party Advisory
securitytracker.com / id
Broken LinkThird Party AdvisoryVDB Entry
exploit-db.com / exploits/44677
ExploitThird Party AdvisoryVDB Entry
kb.cert.org / vuls/id/362983
Third Party AdvisoryUS Government Resource
kernel.org / pub/linux/kernel/v2.6/ChangeLog-2.6.36
Broken Link
redhat.com / support/errata/RHSA-2010-0792.html
Broken LinkThird Party Advisory
redhat.com / support/errata/RHSA-2010-0842.html
Broken LinkThird Party Advisory
securityfocus.com / archive/1/520102/100/0/threaded
Broken LinkThird Party AdvisoryVDB Entry
ubuntu.com / usn/USN-1000-1
Third Party Advisory
vmware.com / security/advisories/VMSA-2011-0012.html
Third Party Advisory
vsecurity.com / download/tools/linux-rds-exploit.c
Broken Link
vsecurity.com / resources/advisory/20101019-1
Broken Link
vupen.com / english/advisories/2011/0298
Broken LinkThird Party Advisory