Log in Start free

Actively exploited · Published Nov 10, 2016 · Assigned by Chrome

CVE-2016-5195

High 7.0 Exploited

In plain English

A high-severity race condition in Kernel from Linux. Attackers are actively exploiting it in the wild (listed by CISA on March 3, 2022). The chance it is exploited in the next 30 days is estimated at 83.5% (higher than 99.7% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.0High
Exploit odds (30 days)83.5%top 0.3% of all CVEs
Exploited in the wildYesCISA KEV since Mar 3, 2022
Attack tooling1Public PoC

CISA guidance

Apply updates per vendor instructions.

Federal agencies must remediate by Mar 24, 2022.

Official description

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux4.7.8-1DEBIAN-CVE-2016-5195
Debian:13linux4.7.8-1DEBIAN-CVE-2016-5195
Debian:14linux4.7.8-1DEBIAN-CVE-2016-5195

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

Weakness: CWE-362 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References