CVE Watch—

CVE-2010-3904

Linux Kernel Improper Input Validation Vulnerability

CVSS

—

No CVSS

EPSS

12.2%

p96

KEV

YES

May 12, 2023

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

11.2%EPSS · 30 days12.2%

2026-06-302026-07-16

KEV catalog record

Product

Linux / Kernel

Vulnerability

Linux Kernel Improper Input Validation Vulnerability

Added to KEV

May 12, 2023

Remediate by

Jun 2, 2023

Known ransomware use

Summary description

Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.

Required action

The impacted product is end-of-life and should be disconnected if still in use.

Notes

https://lkml.iu.edu/hypermail/linux/kernel/1601.3/06474.html; https://nvd.nist.gov/vuln/detail/CVE-2010-3904

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-314317.8 HIG

99.9%

KEV—80Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability3d CVE-2022-0847—

99.8%

KEV—80Linux Kernel Privilege Escalation Vulnerability—CVE-2016-5195—

99.7%

KEV—80Linux Kernel Race Condition Vulnerability—CVE-2021-22555—

99.5%

KEV—80Linux Kernel Heap Out-of-Bounds Write Vulnerability—CVE-2019-13272—

98.8%

KEV—80Linux Kernel Improper Privilege Management Vulnerability—CVE-2013-2094—

98.7%

KEV—80Linux Kernel Privilege Escalation Vulnerability—