CVE-2010-3904: The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implement...

Security readout for executives and security teams

This is an old Linux kernel local privilege-escalation flaw. A user who already has local access could potentially gain full system control on vulnerable kernels. It is not described as a remote, unauthenticated network compromise, but CISA KEV marks it as known exploited, so legacy systems deserve priority review. Exposure is most likely on legacy Linux kernels or vendor builds that included the vulnerable RDS code and lacked the relevant backported fixes. Vendor advisories exist for Ubuntu, Red Hat, SUSE, and VMware contexts. The bundle’s affected-product metadata is incomplete, so confirm through vendor package advisories, not kernel version alone. Treat this as a high-priority legacy Linux cleanup item. It is a local privilege-escalation issue, not a first-step remote intrusion by itself, but known exploitation and root-level impact make it important on systems where attackers may already have footholds. Mitigation focus: Identify Linux systems running kernels before 2.6.36 or affected vendor backports.; Apply vendor kernel updates from Ubuntu, Red Hat, SUSE, VMware, or the relevant distributor.; Check CISA KEV remediation expectations for externally governed environments..

Prepared

May 22, 2026, 05:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.