CVEs / CVE-2016-5195
CVE-2016-5195: Linux Kernel Race Condition Vulnerability
- Known exploited in the CISA KEV catalog since 3 Mar 2022
- high 7 CVSS 3.1 (NVD)
- EPSS 83.5% chance of exploitation in the next 30 days, higher than 99% of CVEs (30 Oct 2026)
- Last changed at its sources
Are you affected? Check your servers with Stackurity: it lists the software on each server and the vulnerabilities to fix first.
Check your servers with Stackurity Already using Stackurity? Search for CVE-2016-5195
Summary
Race condition in mm/gup.c in the Linux kernel allows local users to escalate privileges.
Description
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."
Affected and fixed versions
| Product | Affected | Fixed in |
|---|---|---|
| n/a n/a | n/a | — |
Exploitation
| In CISA KEV since | 3 Mar 2022 |
|---|---|
| Due date for US federal agencies | 24 Mar 2022 |
| Used in ransomware campaigns | Unknown |
| Required action | Apply updates per vendor instructions. |
Severity
| CVSS 3.1 | 7 highCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HScored by NVD |
|---|---|
| Weakness | CWE-362 |
References
- CVE-2016-5195 on NVD
- CVE-2016-5195 in the CISA KEV catalog
- CVE-2016-5195 on OSV
- http://fortiguard.com/advisory/FG-IR-16-063 Third Party Advisory
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619 Issue Tracking, Patch, Vendor Advisory
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10770 Third Party Advisory
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10774 Third Party Advisory
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10807 Third Party Advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00034.html Mailing List
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00035.html Mailing List
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00036.html Mailing List
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00038.html Mailing List
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00039.html Mailing List
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00040.html Mailing List
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00045.html Mailing List
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00048.html Mailing List
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00049.html Mailing List
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00050.html Mailing List
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00051.html Mailing List
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00052.html Mailing List
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00053.html Mailing List
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00054.html Mailing List
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00055.html Mailing List
Sources
Exploitation status from the CISA Known Exploited Vulnerabilities catalog. EPSS scores from FIRST. Descriptions, severity and references from the National Vulnerability Database. Open-source package versions from OSV (CC-BY 4.0). Text is shown as each source states it; Stackurity does not edit it. Check the vendor's advisory before acting.
This product uses data from the NVD API but is not endorsed or certified by the NVD.