CVSS 3.1
7.0 highCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2016-5195
High (7.0) in Linux Kernel. In CISA KEV since 2022-03-03. EPSS 84% chance of exploitation in the next 30 days.
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."
Severity
- EPSS
- 84% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
- CISA KEV
- listed 2022-03-03, due 2022-03-24
- CWE
- CWE-362
- Published
- Modified
- Record from
- the NVD, synced
Affected
- canonical:ubuntu_linux
- debian:debian_linux
- fedoraproject:fedora
- linux:linux_kernel
- netapp:cloud_backup
- netapp:hci_storage_nodes
- netapp:oncommand_balance
- netapp:oncommand_performance_manager
- netapp:oncommand_unified_manager_for_clustered_data_ontap
- netapp:ontap_select_deploy_administration_utility
- netapp:snapprotect
- netapp:solidfire
- paloaltonetworks:pan-os
- redhat:enterprise_linux
- redhat:enterprise_linux_aus
- redhat:enterprise_linux_eus
- redhat:enterprise_linux_long_life
- redhat:enterprise_linux_tus
References
- http://fortiguard.com/advisory/FG-IR-16-063
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10770
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10774
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10807