CVE Watch—

CVE-2010-3904

Linux Kernel Improper Input Validation Vulnerability

CVSS

—

No CVSS

EPSS

14.6%

p96

KEV

YES

May 12, 2023

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

12.2%EPSS · 30 days14.7%

2026-08-022026-08-31

KEV catalog record

Product

Linux / Kernel

Vulnerability

Linux Kernel Improper Input Validation Vulnerability

Added to KEV

May 12, 2023

Remediate by

Jun 2, 2023

Known ransomware use

Summary description

Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.

Required action

The impacted product is end-of-life and should be disconnected if still in use.

Notes

https://lkml.iu.edu/hypermail/linux/kernel/1601.3/06474.html; https://nvd.nist.gov/vuln/detail/CVE-2010-3904

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-533627.8 HIG

41.5%

KEV—62Linux Kernel Unspecified Vulnerability3d CVE-2026-314317.8 HIG

100.0%

KEV—80Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability34d CVE-2025-383527.8 HIG

68.0%

KEV—70Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability32d CVE-2024-10867.8 HIG

98.0%

KEV—79Linux Kernel Use-After-Free Vulnerability24d CVE-2022-25865.3 MED

95.4%

KEV—79Linux Kernel Use-After-Free Vulnerability11d CVE-2022-09957.8 HIG

95.1%

KEV—79Linux Kernel Out-of-Bounds Write Vulnerability5d