CVE-2016-5195: Linux Kernel Race Condition Vulnerability

Vulnerability summary

CVE-2016-5195 is a high (CVSS 7.2) vulnerability in Linux Kernel. It is known to be exploited: CISA lists it, first on 03-03-2022. EPSS estimates a 83.52% chance of exploitation in the next 30 days, higher than 99.6% of scored vulnerabilities. 12 public exploits are recorded.

Timeline

1. 10-11-2016
   PublishedVulnerability first disclosed.
2. 03-03-2022
   Added to CISA KEVExploitedLinux Kernel Race Condition Vulnerability
3. 24-03-2022
   CISA remediation dueDeadline passedApply updates per vendor instructions.
4. 04-11-2025
   Last modifiedVulnerability information updated.

Description

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."

• CWE-362Concurrent Execution using Shared Resource with Improper SynchronizationThe product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.