CVE-2016-5195

UNKNOWN

Published 2016-11-10T21:00:00.000Z

Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2016-5195. We'll provide specific mitigation strategies based on your environment and risk profile.

CVSS Score

V3.1

7.0

/10

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Base Score Metrics

Exploitability: N/A Impact: N/A

EPSS Score

v2025.03.14

0.942

probability

of exploitation in the wild

There is a 94.2% chance that this vulnerability will be exploited in the wild within the next 30 days.

Updated: 2025-06-25

Exploit Probability

Percentile: 0.999

Higher than 99.9% of all CVEs

Attack Vector Metrics

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Impact Metrics

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Description

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Known Exploited Vulnerability

This vulnerability is actively being exploited in the wild

View KEV Details

Remediation Status

Overdue

Due Date

March 24, 2022

Added to KEV

March 3, 2022

Required Action

Apply updates per vendor instructions.

Affected Product

Vendor/Project: Linux

Product: Kernel

Ransomware Risk

Known Ransomware Use

KEV Catalog Version: 2025.01.24 Released: January 24, 2025

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed HIGH

GHSA-j68w-7qm9-fjqq

Advisory Details

CVSS Scoring

CVSS Score

7.5

CVSS Vector


                                    CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2016-5195

WEB https://github.com/torvalds/linux/commit/19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619

WEB https://access.redhat.com/errata/RHSA-2017:0372

WEB https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E7M62SRP6CZLJ4ZXCRZKV4WPLQBSR7DT

WEB https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NWMDLBWMGZKFHMRJ7QUQVCERP5QHDB6W

WEB https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W3APRVDVPDBXLH4DC5UKZVCR742MJIM3

WEB https://lists.fedoraproject.org/archives/list/[email protected]/message/E7M62SRP6CZLJ4ZXCRZKV4WPLQBSR7DT

WEB https://lists.fedoraproject.org/archives/list/[email protected]/message/NWMDLBWMGZKFHMRJ7QUQVCERP5QHDB6W

WEB https://lists.fedoraproject.org/archives/list/[email protected]/message/W3APRVDVPDBXLH4DC5UKZVCR742MJIM3

WEB https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-5195.html

WEB https://security-tracker.debian.org/tracker/CVE-2016-5195

WEB https://security.netapp.com/advisory/ntap-20161025-0001

WEB https://security.paloaltonetworks.com/CVE-2016-5195

WEB https://source.android.com/security/bulletin/2016-11-01.html

WEB https://source.android.com/security/bulletin/2016-12-01.html

WEB https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-vcsd

WEB https://www.arista.com/en/support/advisories-notices/security-advisories/1753-security-advisory-0026

WEB https://www.exploit-db.com/exploits/40611

WEB https://www.exploit-db.com/exploits/40616

WEB https://www.exploit-db.com/exploits/40839

WEB https://www.exploit-db.com/exploits/40847

WEB https://www.kb.cert.org/vuls/id/243144

WEB https://access.redhat.com/security/cve/cve-2016-5195

WEB https://access.redhat.com/security/vulnerabilities/2706661

WEB https://bto.bluecoat.com/security-advisory/sa134

WEB https://bugzilla.redhat.com/show_bug.cgi?id=1384344

WEB https://bugzilla.suse.com/show_bug.cgi?id=1004418

WEB https://dirtycow.ninja

WEB https://github.com/dirtycow/dirtycow.github.io/wiki/PoCs

WEB https://github.com/dirtycow/dirtycow.github.io/wiki/VulnerabilityDetails

WEB https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05352241

WEB https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03707en_us

WEB https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03722en_us

WEB https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03742en_us

WEB https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03761en_us

WEB https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05341463

WEB https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05347541

WEB https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05352241

WEB https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes

WEB https://kc.mcafee.com/corporate/index?page=content&id=SB10176

WEB https://kc.mcafee.com/corporate/index?page=content&id=SB10177

WEB https://kc.mcafee.com/corporate/index?page=content&id=SB10222

WEB http://fortiguard.com/advisory/FG-IR-16-063

WEB http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619

WEB http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10770

WEB http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10774

WEB http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10807

WEB http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00034.html

WEB http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00035.html

WEB http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00036.html

WEB http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00038.html

WEB http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00039.html

WEB http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00040.html

WEB http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00045.html

WEB http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00048.html

WEB http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00049.html

WEB http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00050.html

WEB http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00051.html

WEB http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00052.html

WEB http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00053.html

WEB http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00054.html

WEB http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00055.html

WEB http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00056.html

WEB http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00057.html

WEB http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00058.html

WEB http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html

WEB http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00064.html

WEB http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00065.html

WEB http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00066.html

WEB http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00067.html

WEB http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00072.html

WEB http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00033.html

WEB http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00100.html

WEB http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html

WEB http://packetstormsecurity.com/files/139277/Kernel-Live-Patch-Security-Notice-LSN-0012-1.html

WEB http://packetstormsecurity.com/files/139286/DirtyCow-Linux-Kernel-Race-Condition.html

WEB http://packetstormsecurity.com/files/139287/DirtyCow-Local-Root-Proof-Of-Concept.html

WEB http://packetstormsecurity.com/files/139922/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html

WEB http://packetstormsecurity.com/files/139923/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html

WEB http://packetstormsecurity.com/files/142151/Kernel-Live-Patch-Security-Notice-LSN-0021-1.html

WEB http://rhn.redhat.com/errata/RHSA-2016-2098.html

WEB http://rhn.redhat.com/errata/RHSA-2016-2105.html

WEB http://rhn.redhat.com/errata/RHSA-2016-2106.html

WEB http://rhn.redhat.com/errata/RHSA-2016-2107.html

WEB http://rhn.redhat.com/errata/RHSA-2016-2110.html

WEB http://rhn.redhat.com/errata/RHSA-2016-2118.html

WEB http://rhn.redhat.com/errata/RHSA-2016-2120.html

WEB http://rhn.redhat.com/errata/RHSA-2016-2124.html

WEB http://rhn.redhat.com/errata/RHSA-2016-2126.html

WEB http://rhn.redhat.com/errata/RHSA-2016-2127.html

WEB http://rhn.redhat.com/errata/RHSA-2016-2128.html

WEB http://rhn.redhat.com/errata/RHSA-2016-2132.html

WEB http://rhn.redhat.com/errata/RHSA-2016-2133.html

WEB http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-linux

WEB http://www.debian.org/security/2016/dsa-3696

WEB http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161207-01-dirtycow-en

WEB http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.3

WEB http://www.openwall.com/lists/oss-security/2016/10/21/1

WEB http://www.openwall.com/lists/oss-security/2016/10/26/7

WEB http://www.openwall.com/lists/oss-security/2016/10/27/13

WEB http://www.openwall.com/lists/oss-security/2016/10/30/1

WEB http://www.openwall.com/lists/oss-security/2016/11/03/7

WEB http://www.openwall.com/lists/oss-security/2022/03/07/1

WEB http://www.openwall.com/lists/oss-security/2022/08/08/1

WEB http://www.openwall.com/lists/oss-security/2022/08/08/2

WEB http://www.openwall.com/lists/oss-security/2022/08/08/7

WEB http://www.openwall.com/lists/oss-security/2022/08/08/8

WEB http://www.openwall.com/lists/oss-security/2022/08/09/4

WEB http://www.openwall.com/lists/oss-security/2022/08/15/1

WEB http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

WEB http://www.securityfocus.com/archive/1/539611/100/0/threaded

WEB http://www.securityfocus.com/archive/1/540252/100/0/threaded

WEB http://www.securityfocus.com/archive/1/540344/100/0/threaded

WEB http://www.securityfocus.com/archive/1/540736/100/0/threaded

WEB http://www.securityfocus.com/archive/1/archive/1/539611/100/0/threaded

WEB http://www.securityfocus.com/archive/1/archive/1/540252/100/0/threaded

WEB http://www.securityfocus.com/archive/1/archive/1/540344/100/0/threaded

WEB http://www.securityfocus.com/archive/1/archive/1/540736/100/0/threaded

WEB http://www.securityfocus.com/bid/93793

WEB http://www.securitytracker.com/id/1037078

WEB http://www.ubuntu.com/usn/USN-3104-1

WEB http://www.ubuntu.com/usn/USN-3104-2

WEB http://www.ubuntu.com/usn/USN-3105-1

WEB http://www.ubuntu.com/usn/USN-3105-2

WEB http://www.ubuntu.com/usn/USN-3106-1

WEB http://www.ubuntu.com/usn/USN-3106-2

WEB http://www.ubuntu.com/usn/USN-3106-3

WEB http://www.ubuntu.com/usn/USN-3106-4

WEB http://www.ubuntu.com/usn/USN-3107-1

WEB http://www.ubuntu.com/usn/USN-3107-2

Advisory provided by GitHub Security Advisory Database. Published: May 13, 2022, Modified: July 24, 2024

Social Media Intelligence

Real-time discussions and threat intelligence from social platforms

4 posts

Reddit • 2 weeks ago

KindSeaworthiness411

Exploit

Rooting Kyocera E4610 (aka DuraXV LTE) [Verizon's 1.805VZ firmware], Android 7.1.1, Kernel 3.10.49 Folks, I need a second brain and/or some support in this adventure. Android was never my domain, but I have some software qualification, and a bit of reverse engineering abilities. First of all, none of "classic" root-packs …

Also mentions: CVE-2019-2215

15.0

View Original High Risk

Reddit • 3 weeks, 4 days ago

profess-x

PoC

Hackerin update Se você quer **aprender na prática como funcionaram algumas das vulnerabilidades mais famosas da história**, acabamos de lançar novos conteúdos na nossa plataforma (100% em português 🇧🇷). 👉 Módulos recém-lançados: * Heartbleed (**CVE-2014-0160**) * EternalBlue (**CVE-2017-0144**) * Dirty COW (**CVE-2016-5195**) * Drupalgeddon2 (**CVE-2018-7600**) * WordPress RevSlider (**CVE-2014-9735**) * …