NetSight
IP …
high7.0Known exploitedPublic exploit code

CVE-2016-5195

Linux Kernel Race Condition Vulnerability

Exploited in the wild

This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-03. Federal due date: 2022-03-24.

Apply updates per vendor instructions.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."

Affected products

VendorProductAffected versions
CanonicalUbuntu Linux
Versions 12.04, 14.04, 16.04, 16.10
LinuxLinux Kernel
from 2.6.22 before 3.2.83
from 3.3 before 3.4.113
from 3.5 before 3.10.104
from 3.11 before 3.12.66
from 3.13 before 3.16.38
from 3.17 before 3.18.44
RedhatEnterprise Linux
Versions 5, 6.0, 7.0
RedhatEnterprise Linux Aus
Versions 6.2, 6.4, 6.5
RedhatEnterprise Linux Eus
Versions 6.6, 6.7, 7.1
RedhatEnterprise Linux Long Life
Versions 5.6, 5.9
RedhatEnterprise Linux Tus
Version 6.5
DebianDebian Linux
Versions 7.0, 8.0
FedoraprojectFedora
Versions 23, 24, 25
PaloaltonetworksPan-Os
from 5.1 before 7.0.14
from 7.1.0 before 7.1.8
NetappCloud Backup
All versions
NetappHci Storage Nodes
All versions

Weakness classification

CWE-362

References