CVE-2010-3904
High · 7.8 CISA KEVCVSS
7.8
EPSS
15.9%
Published
Dec 6, 2010
CISA due date
Jun 2, 2023
The record
The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:5::client | kernel | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::client | kernel-PAE | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::client | kernel-PAE-debuginfo | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::client | kernel-PAE-devel | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::client | kernel-debug | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::client | kernel-debug-debuginfo | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::client | kernel-debug-devel | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::client | kernel-debuginfo | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::client | kernel-debuginfo-common | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::client | kernel-devel | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::client | kernel-doc | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::client | kernel-headers | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::client | kernel-kdump | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::client | kernel-kdump-debuginfo | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::client | kernel-kdump-devel | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::client | kernel-xen | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::client | kernel-xen-debuginfo | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::client | kernel-xen-devel | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::server | kernel | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::server | kernel-PAE | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::server | kernel-PAE-debuginfo | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::server | kernel-PAE-devel | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::server | kernel-debug | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::server | kernel-debug-debuginfo | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::server | kernel-debug-devel | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::server | kernel-debuginfo | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::server | kernel-debuginfo-common | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::server | kernel-devel | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::server | kernel-doc | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::server | kernel-headers | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::server | kernel-kdump | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::server | kernel-kdump-debuginfo | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::server | kernel-kdump-devel | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::server | kernel-xen | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::server | kernel-xen-debuginfo | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:5::server | kernel-xen-devel | 0 | 0:2.6.18-194.17.4.el5 |
| Red Hat:enterprise_linux:6::client | kernel | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-bootwrapper | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-debug | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-debug-debuginfo | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-debug-devel | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-debuginfo | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-debuginfo-common-i686 | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-debuginfo-common-ppc64 | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-debuginfo-common-s390x | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-debuginfo-common-x86_64 | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-devel | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-doc | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-firmware | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-headers | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-kdump | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-kdump-debuginfo | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::client | kernel-kdump-devel | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::client | perf | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-bootwrapper | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-debug | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-debug-debuginfo | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-debug-devel | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-debuginfo | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-debuginfo-common-i686 | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-debuginfo-common-ppc64 | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-debuginfo-common-s390x | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-debuginfo-common-x86_64 | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-devel | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-doc | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-firmware | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-headers | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-kdump | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-kdump-debuginfo | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::computenode | kernel-kdump-devel | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::computenode | perf | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-bootwrapper | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-debug | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-debug-debuginfo | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-debug-devel | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-debuginfo | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-debuginfo-common-i686 | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-debuginfo-common-ppc64 | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-debuginfo-common-s390x | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-debuginfo-common-x86_64 | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-devel | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-doc | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-firmware | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-headers | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-kdump | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-kdump-debuginfo | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::server | kernel-kdump-devel | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::server | perf | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-bootwrapper | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-debug | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-debug-debuginfo | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-debug-devel | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-debuginfo | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-debuginfo-common-i686 | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-debuginfo-common-ppc64 | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-debuginfo-common-s390x | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-debuginfo-common-x86_64 | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-devel | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-doc | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-firmware | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-headers | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-kdump | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-kdump-debuginfo | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::workstation | kernel-kdump-devel | 0 | 0:2.6.32-71.7.1.el6 |
| Red Hat:enterprise_linux:6::workstation | perf | 0 | 0:2.6.32-71.7.1.el6 |
Related vulnerabilities
- CVE-2016-5195 Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local… Also affects kernel
- CVE-2016-7117 Use-after-free vulnerability in the __sys_recvmmsg function in net/socket.c in the Linux… Also affects kernel
- CVE-2016-1583 The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel before… Also affects kernel
- CVE-2015-1805 The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel… Also affects kernel
- CVE-2014-8159 The InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on… Also affects kernel
- CVE-2014-3917 kernel/auditsc.c in the Linux kernel through 3.14.5, when CONFIG_AUDITSYSCALL is enabled… Also affects kernel
- CVE-2013-2596 Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel… Also affects kernel
- CVE-2012-0217 The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix… Also affects kernel