CVE-2016-5195

Published: Nov 10, 2016Modified: Apr 21, 2026CISA KEV

7.0

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.0 / Impact: 5.9

Source: NVD

Description

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."

Affected (41)

Products: Canonical: Ubuntu Linux · Linux: Linux Kernel · Redhat: Enterprise Linux, Enterprise Linux Aus, Enterprise Linux Eus, Enterprise Linux Long Life, Enterprise Linux Tus · +4 more

Show all products

1 product

1 product

5 products

Enterprise Linux Long Life

1 product

1 product

1 product

8 products

Oncommand Performance Manager

Oncommand Unified Manager For Clustered Data Ontap

Ontap Select Deploy Administration Utility

Snapprotect

Solidfire

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 16.04
Canonical Ubuntu Linux	Version 16.10

Configuration B

10 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	From 2.6.22 to 3.2.83
Linux Linux Kernel	From 3.11 to 3.12.66
Linux Linux Kernel	From 3.13 to 3.16.38
Linux Linux Kernel	From 3.17 to 3.18.44
Linux Linux Kernel	From 3.19 to 4.1.35
Linux Linux Kernel	From 3.3 to 3.4.113
Linux Linux Kernel	From 3.5 to 3.10.104
Linux Linux Kernel	From 4.2 to 4.4.26
Linux Linux Kernel	From 4.5 to 4.7.9
Linux Linux Kernel	From 4.8 to 4.8.3

Configuration C

12 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 5
Redhat Enterprise Linux	Version 6.0
Redhat Enterprise Linux	Version 7.0
Redhat Enterprise Linux Aus	Version 6.2
Redhat Enterprise Linux Aus	Version 6.4
Redhat Enterprise Linux Aus	Version 6.5
Redhat Enterprise Linux Eus	Version 6.6
Redhat Enterprise Linux Eus	Version 6.7
Redhat Enterprise Linux Eus	Version 7.1
Redhat Enterprise Linux Long Life	Version 5.6
Redhat Enterprise Linux Long Life	Version 5.9
Redhat Enterprise Linux Tus	Version 6.5

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0
Debian Debian Linux	Version 8.0

Configuration E

3 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 23
Fedoraproject Fedora	Version 24
Fedoraproject Fedora	Version 25

Configuration F

2 vulnerable

Vulnerable Software	Affected Versions
Paloaltonetworks Pan Os	From 5.1 to 7.0.14
Paloaltonetworks Pan Os	From 7.1.0 to 7.1.8

Configuration G

8 vulnerable

Vulnerable Software	Affected Versions
Netapp Cloud Backup	All versions
Netapp Hci Storage Nodes	All versions
Netapp Oncommand Balance	All versions
Netapp Oncommand Performance Manager	All versions
Netapp Oncommand Unified Manager For Clustered Data Ontap	All versions
Netapp Ontap Select Deploy Administration Utility	All versions
Netapp Snapprotect	All versions
Netapp Solidfire	All versions

Related CWEs

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

The product contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References (254)

http://fortiguard.com/advisory/FG-IR-16-063

Source: chrome-cve-admin@google.com

Third Party Advisory

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619

Source: chrome-cve-admin@google.com

Issue TrackingPatchVendor Advisory

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10770

Source: chrome-cve-admin@google.com

Third Party Advisory

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10774

Source: chrome-cve-admin@google.com

Third Party Advisory

http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10807

Source: chrome-cve-admin@google.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00034.html

Source: chrome-cve-admin@google.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00035.html

Source: chrome-cve-admin@google.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00036.html

Source: chrome-cve-admin@google.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00038.html

Source: chrome-cve-admin@google.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00039.html

Source: chrome-cve-admin@google.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00040.html

Source: chrome-cve-admin@google.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00045.html

Source: chrome-cve-admin@google.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00048.html

Source: chrome-cve-admin@google.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00049.html

Source: chrome-cve-admin@google.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00050.html

Source: chrome-cve-admin@google.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00051.html

Source: chrome-cve-admin@google.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00052.html

Source: chrome-cve-admin@google.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00053.html

Source: chrome-cve-admin@google.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00054.html

Source: chrome-cve-admin@google.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00055.html

Source: chrome-cve-admin@google.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00056.html

Source: chrome-cve-admin@google.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00057.html

Source: chrome-cve-admin@google.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00058.html

Source: chrome-cve-admin@google.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html

Source: chrome-cve-admin@google.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00064.html

Source: chrome-cve-admin@google.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00065.html

Source: chrome-cve-admin@google.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00066.html

Source: chrome-cve-admin@google.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00067.html

Source: chrome-cve-admin@google.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00072.html

Source: chrome-cve-admin@google.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00033.html

Source: chrome-cve-admin@google.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00100.html

Source: chrome-cve-admin@google.com

Mailing List

http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html

Source: chrome-cve-admin@google.com

Third Party Advisory

http://packetstormsecurity.com/files/139277/Kernel-Live-Patch-Security-Notice-LSN-0012-1.html

Source: chrome-cve-admin@google.com

ExploitThird Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/139286/DirtyCow-Linux-Kernel-Race-Condition.html

Source: chrome-cve-admin@google.com

ExploitThird Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/139287/DirtyCow-Local-Root-Proof-Of-Concept.html

Source: chrome-cve-admin@google.com

ExploitThird Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/139922/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html

Source: chrome-cve-admin@google.com

ExploitThird Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/139923/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html

Source: chrome-cve-admin@google.com

ExploitThird Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/142151/Kernel-Live-Patch-Security-Notice-LSN-0021-1.html

Source: chrome-cve-admin@google.com

Third Party AdvisoryVDB Entry

http://rhn.redhat.com/errata/RHSA-2016-2098.html

Source: chrome-cve-admin@google.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-2105.html

Source: chrome-cve-admin@google.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-2106.html

Source: chrome-cve-admin@google.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-2107.html

Source: chrome-cve-admin@google.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-2110.html

Source: chrome-cve-admin@google.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-2118.html

Source: chrome-cve-admin@google.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-2120.html

Source: chrome-cve-admin@google.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-2124.html

Source: chrome-cve-admin@google.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-2126.html

Source: chrome-cve-admin@google.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-2127.html

Source: chrome-cve-admin@google.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-2128.html

Source: chrome-cve-admin@google.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-2132.html

Source: chrome-cve-admin@google.com

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2016-2133.html

Source: chrome-cve-admin@google.com

Third Party Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-linux

Source: chrome-cve-admin@google.com

Third Party Advisory

http://www.debian.org/security/2016/dsa-3696

Source: chrome-cve-admin@google.com

Third Party Advisory

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161207-01-dirtycow-en

Source: chrome-cve-admin@google.com

Third Party Advisory

http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.3

Source: chrome-cve-admin@google.com

Release Notes

http://www.openwall.com/lists/oss-security/2016/10/21/1

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/10/26/7

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/10/27/13

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/10/30/1

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2016/11/03/7

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2022/03/07/1

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2022/08/08/1

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2022/08/08/2

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2022/08/08/7

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2022/08/08/8

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2022/08/09/4

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2022/08/15/1

Source: chrome-cve-admin@google.com

Mailing ListThird Party Advisory

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

Source: chrome-cve-admin@google.com

PatchThird Party Advisory

http://www.securityfocus.com/archive/1/539611/100/0/threaded

Source: chrome-cve-admin@google.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/540252/100/0/threaded

Source: chrome-cve-admin@google.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/540344/100/0/threaded

Source: chrome-cve-admin@google.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/540736/100/0/threaded

Source: chrome-cve-admin@google.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/archive/1/539611/100/0/threaded

Source: chrome-cve-admin@google.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/archive/1/540252/100/0/threaded

Source: chrome-cve-admin@google.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/archive/1/540344/100/0/threaded

Source: chrome-cve-admin@google.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/archive/1/540736/100/0/threaded

Source: chrome-cve-admin@google.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/93793

Source: chrome-cve-admin@google.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1037078

Source: chrome-cve-admin@google.com

Broken LinkThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-3104-1

Source: chrome-cve-admin@google.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-3104-2

Source: chrome-cve-admin@google.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-3105-1

Source: chrome-cve-admin@google.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-3105-2

Source: chrome-cve-admin@google.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-3106-1

Source: chrome-cve-admin@google.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-3106-2

Source: chrome-cve-admin@google.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-3106-3

Source: chrome-cve-admin@google.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-3106-4

Source: chrome-cve-admin@google.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-3107-1

Source: chrome-cve-admin@google.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-3107-2

Source: chrome-cve-admin@google.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2017:0372

Source: chrome-cve-admin@google.com

Broken LinkThird Party Advisory

https://access.redhat.com/security/cve/cve-2016-5195

Source: chrome-cve-admin@google.com

Third Party Advisory

https://access.redhat.com/security/vulnerabilities/2706661

Source: chrome-cve-admin@google.com

Third Party Advisory

https://bto.bluecoat.com/security-advisory/sa134

Source: chrome-cve-admin@google.com

Permissions RequiredThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1384344

Source: chrome-cve-admin@google.com

ExploitIssue Tracking

https://bugzilla.suse.com/show_bug.cgi?id=1004418

Source: chrome-cve-admin@google.com

Issue Tracking

https://dirtycow.ninja

Source: chrome-cve-admin@google.com

Third Party Advisory

https://github.com/dirtycow/dirtycow.github.io/wiki/PoCs

Source: chrome-cve-admin@google.com

Third Party Advisory

https://github.com/dirtycow/dirtycow.github.io/wiki/VulnerabilityDetails

Source: chrome-cve-admin@google.com

ExploitThird Party Advisory

https://github.com/torvalds/linux/commit/19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619

Source: chrome-cve-admin@google.com

Issue TrackingPatch

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05352241

Source: chrome-cve-admin@google.com

Third Party Advisory

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03707en_us

Source: chrome-cve-admin@google.com

Third Party Advisory

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03722en_us

Source: chrome-cve-admin@google.com

Third Party Advisory

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03742en_us

Source: chrome-cve-admin@google.com

Third Party Advisory

https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03761en_us

Source: chrome-cve-admin@google.com

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05341463

Source: chrome-cve-admin@google.com

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05347541

Source: chrome-cve-admin@google.com

Third Party Advisory

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05352241

Source: chrome-cve-admin@google.com

Third Party Advisory

https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes

Source: chrome-cve-admin@google.com

Broken LinkThird Party Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10176

Source: chrome-cve-admin@google.com

Broken LinkThird Party Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10177

Source: chrome-cve-admin@google.com

Broken LinkThird Party Advisory

https://kc.mcafee.com/corporate/index?page=content&id=SB10222

Source: chrome-cve-admin@google.com

Broken LinkThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E7M62SRP6CZLJ4ZXCRZKV4WPLQBSR7DT/

Source: chrome-cve-admin@google.com

Release Notes

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NWMDLBWMGZKFHMRJ7QUQVCERP5QHDB6W/

Source: chrome-cve-admin@google.com

Release Notes

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W3APRVDVPDBXLH4DC5UKZVCR742MJIM3/

Source: chrome-cve-admin@google.com

Release Notes

https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-5195.html

Source: chrome-cve-admin@google.com

Third Party Advisory

https://security-tracker.debian.org/tracker/CVE-2016-5195

Source: chrome-cve-admin@google.com

Issue TrackingThird Party Advisory

https://security.netapp.com/advisory/ntap-20161025-0001/

Source: chrome-cve-admin@google.com

Third Party Advisory

https://security.paloaltonetworks.com/CVE-2016-5195

Source: chrome-cve-admin@google.com

Third Party Advisory

https://source.android.com/security/bulletin/2016-11-01.html

Source: chrome-cve-admin@google.com

Third Party Advisory

https://source.android.com/security/bulletin/2016-12-01.html

Source: chrome-cve-admin@google.com

Third Party Advisory

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-vcsd

Source: chrome-cve-admin@google.com

Third Party Advisory

https://www.arista.com/en/support/advisories-notices/security-advisories/1753-security-advisory-0026

Source: chrome-cve-admin@google.com

Third Party Advisory

https://www.exploit-db.com/exploits/40611/

Source: chrome-cve-admin@google.com

ExploitThird Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/40616/

Source: chrome-cve-admin@google.com

ExploitThird Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/40839/

Source: chrome-cve-admin@google.com

ExploitThird Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/40847/

Source: chrome-cve-admin@google.com

Third Party AdvisoryVDB Entry

https://www.kb.cert.org/vuls/id/243144

Source: chrome-cve-admin@google.com

Third Party AdvisoryUS Government Resource

http://fortiguard.com/advisory/FG-IR-16-063