CVE-2010-3904—Linux Kernel Improper Input Validation Vulnerability

PUBLISHEDvulnerability record
2023-05-12 · last modified June 21, 2025

Metadata

CVE ID：
CVE-2010-3904
项目：
Linux
产品：
Kernel
添加日期：
2023-05-12
到期日：
2023-06-02
最后更新：
June 21, 2025

漏洞名称

Linux Kernel Improper Input Validation Vulnerability

描述

Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.

已知用于勒索软件活动吗？

勒索软件状态：
Unknown

采集行动

The impacted product is end-of-life and should be disconnected if still in use.

其他说明

  • https://lkml.iu.edu/hypermail/linux/kernel/1601.3/06474.html
  • https://nvd.nist.gov/vuln/detail/CVE-2010-3904

相关 CWE

browse all CVEs