Back to CVE records
High 7.0Known exploited (CISA KEV)Published Nov 10, 2016
CVE-2016-5195Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-…
Updated under an hour ago ()
Does this affect you?
It affects canonical ubuntu_linux and 17 other products. Add what you run to find out whether that includes you.
CISA lists it as known exploited since Mar 3, 2022; federal agencies had to remediate by Mar 24, 2022. Treat that date as your deadline.
Do this next
Start free and add your stack
Free account, 1 product
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."
- CVSS
- 7.0 HIGH (v3.1, CISA ADP)CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- CWE-362
- Known exploited
- Added to CISA KEV Mar 3, 2022; federal remediation due Mar 24, 2022Apply updates per vendor instructions.
- EPSS (exploitation in the next 30 days)
- 83.52% (percentile 100)
- Assigned by
- Chrome
- NVD analysis
- Analyzed
- Record last updated
- Nov 4, 2025
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
canonical ubuntu_linux canonical:ubuntu_linux | 12.04; 14.04; 16.04; 16.10 | NVD |
linux linux_kernel linux:linux_kernel | from 2.6.22 before 3.2.83; from 3.3 before 3.4.113; from 3.5 before 3.10.104; from 3.11 before 3.12.66; from 3.13 before 3.16.38; from 3.17 before 3.18.44; from 3.19 before 4.1.35; from 4.2 before 4.4.26; and 2 more ranges | NVD |
redhat enterprise_linux redhat:enterprise_linux | 5; 6.0; 7.0 | NVD |
redhat enterprise_linux_aus redhat:enterprise_linux_aus | 6.2; 6.4; 6.5 | NVD |
redhat enterprise_linux_eus redhat:enterprise_linux_eus | 6.6; 6.7; 7.1 | NVD |
redhat enterprise_linux_long_life redhat:enterprise_linux_long_life | 5.6; 5.9 | NVD |
redhat enterprise_linux_tus redhat:enterprise_linux_tus | 6.5 | NVD |
debian debian_linux debian:debian_linux | 7.0; 8.0 | NVD |
fedoraproject fedora fedoraproject:fedora | 23; 24; 25 | NVD |
paloaltonetworks pan-os paloaltonetworks:pan-os | from 5.1 before 7.0.14; from 7.1.0 before 7.1.8 | NVD |
netapp cloud_backup netapp:cloud_backup | all versions | NVD |
netapp hci_storage_nodes netapp:hci_storage_nodes | all versions | NVD |
netapp oncommand_balance netapp:oncommand_balance | all versions | NVD |
netapp oncommand_performance_manager netapp:oncommand_performance_manager | all versions | NVD |
netapp oncommand_unified_manager_for_clustered_data_ontap netapp:oncommand_unified_manager_for_clustered_data_ontap | all versions | NVD |
netapp ontap_select_deploy_administration_utility netapp:ontap_select_deploy_administration_utility | all versions | NVD |
netapp snapprotect netapp:snapprotect | all versions | NVD |
netapp solidfire netapp:solidfire | all versions | NVD |
References
- http://rhn.redhat.com/errata/RHSA-2016-2107.htmlvendor-advisory, x-refsource-redhat
- https://www.exploit-db.com/exploits/40616/exploit, x-refsource-exploit-db
- https://access.redhat.com/errata/RHSA-2017:0372vendor-advisory, x-refsource-redhat
- https://bto.bluecoat.com/security-advisory/sa134x-refsource-confirm
- https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05352241x-refsource-confirm
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.htmlx-refsource-confirm
- https://www.exploit-db.com/exploits/40839/exploit, x-refsource-exploit-db
- https://dirtycow.ninjax-refsource-misc
- https://www.exploit-db.com/exploits/40847/exploit, x-refsource-exploit-db
- http://rhn.redhat.com/errata/RHSA-2016-2118.htmlvendor-advisory, x-refsource-redhat
- http://rhn.redhat.com/errata/RHSA-2016-2128.htmlvendor-advisory, x-refsource-redhat
- https://source.android.com/security/bulletin/2016-12-01.htmlx-refsource-confirm
- http://rhn.redhat.com/errata/RHSA-2016-2120.htmlvendor-advisory, x-refsource-redhat
- http://www.openwall.com/lists/oss-security/2016/10/26/7mailing-list, x-refsource-mlist
- http://rhn.redhat.com/errata/RHSA-2016-2133.htmlvendor-advisory, x-refsource-redhat
- http://rhn.redhat.com/errata/RHSA-2016-2098.htmlvendor-advisory, x-refsource-redhat
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03761en_usx-refsource-confirm
- https://www.kb.cert.org/vuls/id/243144third-party-advisory, x-refsource-cert-vn
- https://bugzilla.suse.com/show_bug.cgi?id=1004418x-refsource-confirm
- http://www.securitytracker.com/id/1037078vdb-entry, x-refsource-sectrack
- https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-5195.htmlx-refsource-confirm
- https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03722en_usx-refsource-confirm
- https://security.netapp.com/advisory/ntap-20161025-0001/x-refsource-confirm
- http://www.securityfocus.com/bid/93793vdb-entry, x-refsource-bid
- http://rhn.redhat.com/errata/RHSA-2016-2127.htmlvendor-advisory, x-refsource-redhat
- http://fortiguard.com/advisory/FG-IR-16-063third-party-advisory
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619issue-tracking, patch, vendor-advisory
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10770third-party-advisory
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10774third-party-advisory
- http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10807third-party-advisory
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00034.htmlmailing-list
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00035.htmlmailing-list
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00036.htmlmailing-list
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00038.htmlmailing-list
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00039.htmlmailing-list
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00040.htmlmailing-list
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00045.htmlmailing-list
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00048.htmlmailing-list
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00049.htmlmailing-list
- http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00050.htmlmailing-list
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.