CVE-2016-5195

Advisory lineage Upstream: 0 Downstream: 49
Analyzed
Published: 10 Nov 2016, 21:00
Last modified:04 Nov 2025, 16:09

Vulnerability Summary

Overall Risk (default)
high
58/100
CVSS Score
7.2 HIGH
v2.0 (nvd)
EPSS Score
93.93% CRITICAL
94% probability -0.25%
KEV
Listed
CISA
1 listing
Ransomware
No reports
Public exploits
12 found
Dark Web
Not detected

Timeline

10 Nov 2016, 21:00
Published
Vulnerability first disclosed
03 Mar 2022, 00:00
Added to CISA KEV
Linux Kernel Race Condition Vulnerability
24 Mar 2022, 00:00
CISA Remediation Due
Apply updates per vendor instructions.
04 Nov 2025, 16:09
Last Modified
Vulnerability information updated

Description

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."

CVSS Metrics

  • v3.1•HIGH•Score: 7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  • v2.0•HIGH•Score: 7.2AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS Trends

Current EPSS score: 93.93%• Percentile: 100%

Techniques & Countermeasures

  • CWE-362•Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

    The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Affected Systems

  • canonical•ubuntu_linux

    12.04 | 14.04 | 16.04 | 16.10

  • debian•debian_linux

    7.0 | 8.0

  • fedoraproject•fedora

    23 | 24 | 25

  • linux•linux_kernel

    ≥ 2.6.22, < 3.2.83 | ≥ 3.3, < 3.4.113 | ≥ 3.5, < 3.10.104 | ≥ 3.11, < 3.12.66 | ≥ 3.13, < 3.16.38 | ≥ 3.17, < 3.18.44 | ≥ 3.19, < 4.1.35 | ≥ 4.2, < 4.4.26 | ≥ 4.5, < 4.7.9 | ≥ 4.8, < 4.8.3

  • netapp•cloud_backup

    na

  • netapp•hci_storage_nodes

    na

  • netapp•oncommand_balance

    na

  • netapp•oncommand_performance_manager

    na

  • netapp•oncommand_unified_manager_for_clustered_data_ontap

    na

  • netapp•ontap_select_deploy_administration_utility

    na

  • netapp•snapprotect

    na

  • netapp•solidfire

    na

  • paloaltonetworks•pan-os

    ≥ 5.1, < 7.0.14 | ≥ 7.1.0, < 7.1.8

  • redhat•enterprise_linux

    5 | 6.0 | 7.0

  • redhat•enterprise_linux_aus

    6.2 | 6.4 | 6.5

  • redhat•enterprise_linux_eus

    6.6 | 6.7 | 7.1

  • redhat•enterprise_linux_long_life

    5.6 | 5.9

  • redhat•enterprise_linux_tus

    6.5

References (128)