CVE-2010-3865: Linux Kernel

High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days.

Integer overflow in the rds_rdma_pages function in net/rds/rdma.c in the Linux kernel allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted iovec struct in a Reliable Datagram Sockets (RDS) request, which triggers a buffer overflow.

Affected products

• Linux Linux Kernel: up to and including 2.6.36
• Opensuse Opensuse: version 11.2 only; version 11.3 only
• Suse Linux Enterprise High Availability Extension: version 11 only
• Suse Linux Enterprise Real Time: version 11 only

Published 2011-01-11. Last modified 2026-06-16.