NVD - CVE-2016-5195

CVE-2016-5195 Detail

Deferred

This CVE record is not being prioritized for NVD enrichment efforts due to resource or other concerns.

Description

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."

Metrics

NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.

CVSS 4.0 Severity and Vector Strings:

NIST: NVD

N/A

NVD assessment not yet provided.

CVSS 3.x Severity and Vector Strings:

NIST: NVD

Base Score: 7.0 HIGH

Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

ADP: CISA-ADP

Base Score: 7.0 HIGH

Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS 2.0 Severity and Vector Strings:

National Institute of Standards and Technology

NIST: NVD

Base Score: 7.2 HIGH

Vector: (AV:L/AC:L/Au:N/C:C/I:C/A:C)

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL	Source(s)	Tag(s)
http://fortiguard.com/advisory/FG-IR-16-063	CVE, Chrome	Third Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619	CVE, Chrome	Issue Tracking Patch Vendor Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10770	CVE, Chrome	Third Party Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10774	CVE, Chrome	Third Party Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10807	CVE, Chrome	Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00034.html	CVE, Chrome	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00035.html	CVE, Chrome	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00036.html	CVE, Chrome	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00038.html	CVE, Chrome	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00039.html	CVE, Chrome	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00040.html	CVE, Chrome	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00045.html	CVE, Chrome	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00048.html	CVE, Chrome	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00049.html	CVE, Chrome	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00050.html	CVE, Chrome	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00051.html	CVE, Chrome	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00052.html	CVE, Chrome	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00053.html	CVE, Chrome	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00054.html	CVE, Chrome	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00055.html	CVE, Chrome	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00056.html	CVE, Chrome	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00057.html	CVE, Chrome	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00058.html	CVE, Chrome	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html	CVE, Chrome	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00064.html	CVE, Chrome	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00065.html	CVE, Chrome	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00066.html	CVE, Chrome	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00067.html	CVE, Chrome	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00072.html	CVE, Chrome	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00033.html	CVE, Chrome	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00100.html	CVE, Chrome	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html	CVE, Chrome	Third Party Advisory
http://packetstormsecurity.com/files/139277/Kernel-Live-Patch-Security-Notice-LSN-0012-1.html	CVE, Chrome	Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/139286/DirtyCow-Linux-Kernel-Race-Condition.html	CVE, Chrome	Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/139287/DirtyCow-Local-Root-Proof-Of-Concept.html	CVE, Chrome	Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/139922/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html	CVE, Chrome	Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/139923/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html	CVE, Chrome	Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/142151/Kernel-Live-Patch-Security-Notice-LSN-0021-1.html	CVE, Chrome	Third Party Advisory VDB Entry
http://rhn.redhat.com/errata/RHSA-2016-2098.html	CVE, Chrome	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2105.html	CVE, Chrome	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2106.html	CVE, Chrome	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2107.html	CVE, Chrome	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2110.html	CVE, Chrome	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2118.html	CVE, Chrome	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2120.html	CVE, Chrome	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2124.html	CVE, Chrome	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2126.html	CVE, Chrome	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2127.html	CVE, Chrome	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2128.html	CVE, Chrome	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2132.html	CVE, Chrome	Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2016-2133.html	CVE, Chrome	Third Party Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-linux	CVE, Chrome	Third Party Advisory
http://www.debian.org/security/2016/dsa-3696	CVE, Chrome	Third Party Advisory
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161207-01-dirtycow-en	CVE, Chrome	Third Party Advisory
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.3	CVE, Chrome	Release Notes
http://www.openwall.com/lists/oss-security/2016/10/21/1	CVE, Chrome	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/10/26/7	CVE, Chrome	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/10/27/13	CVE, Chrome	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/10/30/1	CVE, Chrome	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/11/03/7	CVE, Chrome	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/03/07/1	CVE, Chrome	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/08/08/1	CVE, Chrome	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/08/08/2	CVE, Chrome	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/08/08/7	CVE, Chrome	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/08/08/8	CVE, Chrome	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/08/09/4	CVE, Chrome	Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/08/15/1	CVE, Chrome	Mailing List Third Party Advisory
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html	CVE, Chrome	Patch Third Party Advisory
http://www.securityfocus.com/archive/1/539611/100/0/threaded	CVE, Chrome	Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/540252/100/0/threaded	CVE, Chrome	Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/540344/100/0/threaded	CVE, Chrome	Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/540736/100/0/threaded	CVE, Chrome	Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/archive/1/539611/100/0/threaded	CVE, Chrome	Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/archive/1/540252/100/0/threaded	CVE, Chrome	Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/archive/1/540344/100/0/threaded	CVE, Chrome	Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/archive/1/540736/100/0/threaded	CVE, Chrome	Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/93793	CVE, Chrome	Broken Link Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1037078	CVE, Chrome	Broken Link Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-3104-1	CVE, Chrome	Third Party Advisory
http://www.ubuntu.com/usn/USN-3104-2	CVE, Chrome	Third Party Advisory
http://www.ubuntu.com/usn/USN-3105-1	CVE, Chrome	Third Party Advisory
http://www.ubuntu.com/usn/USN-3105-2	CVE, Chrome	Third Party Advisory
http://www.ubuntu.com/usn/USN-3106-1	CVE, Chrome	Third Party Advisory
http://www.ubuntu.com/usn/USN-3106-2	CVE, Chrome	Third Party Advisory
http://www.ubuntu.com/usn/USN-3106-3	CVE, Chrome	Third Party Advisory
http://www.ubuntu.com/usn/USN-3106-4	CVE, Chrome	Third Party Advisory
http://www.ubuntu.com/usn/USN-3107-1	CVE, Chrome	Third Party Advisory
http://www.ubuntu.com/usn/USN-3107-2	CVE, Chrome	Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:0372	CVE, Chrome	Broken Link Third Party Advisory
https://access.redhat.com/security/cve/cve-2016-5195	CVE, Chrome	Third Party Advisory
https://access.redhat.com/security/vulnerabilities/2706661	CVE, Chrome	Third Party Advisory
https://bto.bluecoat.com/security-advisory/sa134	CVE, Chrome	Permissions Required Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1384344	CVE, Chrome	Exploit Issue Tracking
https://bugzilla.suse.com/show_bug.cgi?id=1004418	CVE, Chrome	Issue Tracking
https://dirtycow.ninja	CVE, Chrome	Third Party Advisory
https://github.com/dirtycow/dirtycow.github.io/wiki/PoCs	CVE, Chrome	Third Party Advisory
https://github.com/dirtycow/dirtycow.github.io/wiki/VulnerabilityDetails	CVE, Chrome	Exploit Third Party Advisory
https://github.com/torvalds/linux/commit/19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619	CVE, Chrome	Issue Tracking Patch
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05352241	CVE, Chrome	Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03707en_us	CVE, Chrome	Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03722en_us	CVE, Chrome	Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03742en_us	CVE, Chrome	Third Party Advisory
https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03761en_us	CVE, Chrome	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05341463	CVE, Chrome	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05347541	CVE, Chrome	Third Party Advisory
https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05352241	CVE, Chrome	Third Party Advisory
https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes	CVE, Chrome	Broken Link Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10176	CVE, Chrome	Broken Link Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10177	CVE, Chrome	Broken Link Third Party Advisory
https://kc.mcafee.com/corporate/index?page=content&id=SB10222	CVE, Chrome	Broken Link Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E7M62SRP6CZLJ4ZXCRZKV4WPLQBSR7DT/	CVE, Chrome	Release Notes
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NWMDLBWMGZKFHMRJ7QUQVCERP5QHDB6W/	CVE, Chrome	Release Notes
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W3APRVDVPDBXLH4DC5UKZVCR742MJIM3/	CVE, Chrome	Release Notes
https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-5195.html	CVE, Chrome	Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2016-5195	CVE, Chrome	Issue Tracking Third Party Advisory
https://security.netapp.com/advisory/ntap-20161025-0001/	CVE, Chrome	Third Party Advisory
https://security.paloaltonetworks.com/CVE-2016-5195	CVE, Chrome	Third Party Advisory
https://source.android.com/security/bulletin/2016-11-01.html	CVE, Chrome	Third Party Advisory
https://source.android.com/security/bulletin/2016-12-01.html	CVE, Chrome	Third Party Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-vcsd	CVE, Chrome	Third Party Advisory
https://www.arista.com/en/support/advisories-notices/security-advisories/1753-security-advisory-0026	CVE, Chrome	Third Party Advisory
https://www.exploit-db.com/exploits/40611/	CVE, Chrome	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/40616/	CVE, Chrome	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/40839/	CVE, Chrome	Exploit Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/40847/	CVE, Chrome	Third Party Advisory VDB Entry
https://www.kb.cert.org/vuls/id/243144	CVE, Chrome	Third Party Advisory US Government Resource

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.

Vulnerability Name	Date Added	Due Date	Required Action
Linux Kernel Race Condition Vulnerability	03/03/2022	03/24/2022	Apply updates per vendor instructions.

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-362	Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')	NIST CISA-ADP

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Denotes Vulnerable Software
Are we missing a CPE here? Please let us know.

Change History

39 change records found show changes

Quick Info

CVE Dictionary Entry:
CVE-2016-5195
NVD Published Date:
11/10/2016
NVD Last Modified:
04/12/2025
Source:
Chrome

CVE-2016-5195 Detail

Description

Metrics

References to Advisories, Solutions, and Tools

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Weakness Enumeration

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Change History

Modified Analysis by NIST 4/08/2025 2:12:18 PM

CVE Modified by CISA-ADP 1/29/2025 1:15:28 PM

Modified Analysis by NIST 1/28/2025 12:30:01 PM

CVE Modified by CVE 11/20/2024 9:53:48 PM

Modified Analysis by NIST 7/24/2024 10:27:14 AM

CVE Modified by Chrome 5/14/2024 12:01:02 AM

CVE Modified by Chrome 11/06/2023 9:33:23 PM

Modified Analysis by NIST 1/17/2023 4:00:56 PM

CVE Modified by Chrome 8/15/2022 8:15:15 AM

CVE Modified by Chrome 8/10/2022 4:15:15 PM

CVE Modified by Chrome 8/08/2022 8:15:08 PM

CVE Modified by Chrome 8/08/2022 2:15:08 PM

CVE Modified by Chrome 8/08/2022 8:15:08 AM

CVE Modified by Chrome 3/10/2022 12:41:14 PM

CVE Modified by Chrome 11/17/2021 5:15:54 PM

CVE Modified by Chrome 11/09/2021 8:15:28 PM

CVE Modified by Chrome 11/08/2021 7:15:09 AM

CVE Modified by Chrome 4/26/2020 5:15:10 PM

CVE Modified by Chrome 2/17/2020 11:15:18 AM

CPE Deprecation Remap by NIST 4/22/2019 1:48:01 PM

Modified Analysis by NIST 3/04/2019 12:23:28 PM

CVE Modified by Chrome 11/30/2018 4:31:45 PM

CVE Modified by Chrome 7/18/2018 9:29:04 PM

CVE Modified by Chrome 1/04/2018 9:30:58 PM

CVE Modified by Chrome 11/09/2017 9:29:11 PM

CVE Modified by Chrome 9/19/2017 9:29:02 PM

CVE Modified by Chrome 9/02/2017 9:29:10 PM

CVE Modified by Chrome 7/28/2017 9:34:09 PM

CVE Modified by Chrome 6/19/2017 9:29:00 PM

CVE Modified by Chrome 5/15/2017 9:29:01 PM

CVE Modified by Chrome 5/09/2017 9:29:01 PM

CVE Modified by Chrome 1/17/2017 9:59:06 PM

CVE Modified by Chrome 12/23/2016 9:59:41 PM

CVE Modified by Chrome 12/12/2016 9:59:12 PM

CVE Modified by Chrome 12/02/2016 10:27:42 PM

CVE Modified by Chrome 11/28/2016 3:23:36 PM

Modified Analysis by NIST 11/14/2016 9:26:11 AM

Initial CVE Analysis 11/14/2016 8:53:27 AM

CVE Translated by NIST 11/11/2016 3:45:00 PM

Quick Info