ACTIEF MISBRUIKT
CVE-2010-3904: Linux Kernel Improper Input Validation Vulnerability
| Leverancier | Linux |
|---|---|
| Product | Kernel |
| Actief misbruikt | Ja |
| Toegevoegd aan CISA KEV | 12 mei 2023 |
| CISA-deadline (Amerikaanse overheid) | 2 jun 2023 |
| Zwakte (CWE) | CWE-20 |
Vereiste actie (tekst van CISA, Engels)
The impacted product is end-of-life and should be disconnected if still in use.
Beschrijving (NVD, Engels)
Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.
BRONNEN
Andere lekken bij Linux
- CVE-2026-46300: Linux Kernel Missing Initialization of a Variable Vulnerability
- CVE-2026-53266: Linux Kernel Out-of-Bounds Write Vulnerability
- CVE-2025-39964: Linux Kernel Race Condition Vulnerability
- CVE-2025-39682: Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability
- CVE-2026-53362: Linux Kernel Unspecified Vulnerability
Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.