CVE-2016-5195

CVE Database · CVE-2016-5195

CVE-2016-5195

· HIGHAnalyzed

CVSS v3.1

7.0

EPSS

83.91%

Published

Nov 10, 2016

Modified

Apr 21, 2026

CISA Known Exploited Vulnerability

Added: 2022-03-03 · Due: 2022-03-24

Apply updates per vendor instructions.

Public PoC / Exploit (14)

All weaponized →

Exploit-DBLinux Kernel 2.6.22 < 3.9 (x86/x64) - 'Dirty COW /proc/self/mem' Race Condition Privilege Escalation (SUID Method)Exploit-DBLinux Kernel 2.6.22 < 3.9 - 'Dirty COW /proc/self/mem' Race Condition Privilege Escalation (/etc/passwd Method)Exploit-DBLinux Kernel 2.6.22 < 3.9 - 'Dirty COW PTRACE_POKEDATA' Race Condition (Write Access Method)Exploit-DBLinux Kernel 2.6.22 < 3.9 - 'Dirty COW' 'PTRACE_POKEDATA' Race Condition Privilege Escalation (/etc/passwd Method)Exploit-DBLinux Kernel 2.6.22 < 3.9 - 'Dirty COW' /proc/self/mem Race Condition (Write Access Method)TrickestTrickest PoC index GitHub PoCtimwr/CVE-2016-5195★1003 GitHub PoCfirefart/dirtycow★931 GitHub PoCscumjr/dirtycow-vdso★510 GitHub PoCgbonacini/CVE-2016-5195★340 GitHub PoCr1is/CVE-2022-0847★281 GitHub PoChyln9/VIKIROOT★271 GitHub PoCBrucetg/DirtyCow-EXP★141 GitHub PoCDavidBuchanan314/cowroot★32

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-362CWE-362

Affected Products (41)

canonical · ubuntu_linuxvulnerable