Skip to content
Fencer Vulns
high 7.0

CVE-2016-5195 kev in the critical feed json

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect h…

published 2016-11-10 9 y ago modified 2026-06-17 4 mo ago also EUVD-2016-6146

cvss
7.0
version 3.1, CNA
cisa kev
Exploited
added 2022-03-03
epss
83.5%
EPSS 83.5% chance of exploitation in 30 days, percentile 99.6%
public exploits
5
Exploit-DB

Summary

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."

Patch / fix

cisa required action Apply updates per vendor instructions.

  • linux linux_kernel 3.2.83, 3.4.113, 3.10.104, 3.12.66, 3.16.38, 3.18.44, 4.1.35, 4.4.26, 4.7.9, 4.8.3
  • paloaltonetworks pan-os 7.0.14, 7.1.8
  • linux Debian 14, Debian 13, Debian 12 4.7.8-1

debian advisories DEBIAN-CVE-2016-5195

  • linux Ubuntu 14.04 LTS 3.13.0-100.147
  • linux Ubuntu 16.04 LTS 4.4.0-45.66
  • linux-raspi2 Ubuntu 16.04 LTS 4.4.0-1029.36
  • linux-lts-vivid Ubuntu 14.04 LTS 3.19.0-73.81~14.04.1
  • linux-lts-xenial Ubuntu 14.04 LTS 4.4.0-45.66~14.04.1
  • linux-snapdragon Ubuntu 16.04 LTS 4.4.0-1032.36

ubuntu advisories UBUNTU-CVE-2016-5195

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • kernel RHEL 5 2.6.18-416.el5
  • kernel-PAE RHEL 5 2.6.18-416.el5
  • kernel-xen RHEL 5 2.6.18-416.el5
  • kernel-kdump RHEL 5 2.6.18-416.el5
  • kernel-debuginfo-common RHEL 5 2.6.18-416.el5
  • kernel-aarch64 RHEL 7 4.5.0-15.2.1.el7
  • perf RHEL 7 4.5.0-15.2.1.el7
  • kernel RHEL 7 4.5.0-15.2.1.el7

red hat advisories RHSA-2016:2124RHSA-2017:0372RHSA-2016:2107RHSA-2016:2110RHSA-2016:2133RHSA-2016:2128

  • kernel-rt SLE Real Time 12 SP1 3.12.67-60.27.1
  • kernel-compute SLE Real Time 12 SP1 3.12.67-60.27.1
  • kernel-syms-rt SLE Real Time 12 SP1 3.12.67-60.27.1
  • kernel-rt_debug SLE Real Time 12 SP1 3.12.67-60.27.1
  • kernel-source-rt SLE Real Time 12 SP1 3.12.67-60.27.1
  • kernel-compute_debug SLE Real Time 12 SP1 3.12.67-60.27.1
  • kernel-rt SLE Real Time 11 SP4 3.0.101.rt130-65.1
  • kernel-syms-rt SLE Real Time 11 SP4 3.0.101.rt130-65.1

suse advisories SUSE-SU-2016:3304-1SUSE-SU-2016:3069-1SUSE-SU-2016:2673-1SUSE-SU-2016:2659-1SUSE-SU-2016:2657-1SUSE-SU-2016:2658-1

  • kernel-source openSUSE Tumbleweed 4.8.13-1.1
  • kubernetes openSUSE Leap 15.1 1.18.0-lp151.5.1
  • cri-o openSUSE Leap 15.1 1.17.1-lp151.2.2
  • go1.14 openSUSE Leap 15.1 1.14-lp151.6.1
  • cri-tools openSUSE Leap 15.1 1.18.0-lp151.2.1

opensuse advisories openSUSE-SU-2024:10128-1openSUSE-SU-2020:0554-1

  • linux Arch Linux 4.8.3-1
  • linux-lts Arch Linux 4.4.26-1

arch linux advisories AVG-48AVG-50

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2016-5195 updated cvss 7.8

kernel: mm: privilege escalation via MAP_PRIVATE COW breakage

  • Red Hat Enterprise Linux (v. 5 server) kernel 2.6.18-416.el5, kernel-PAE 2.6.18-416.el5, kernel-xen 2.6.18-416.el5, kernel-kdump 2.6.18-416.el5, kernel-debuginfo-common 2.6.18-416.el5
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2124
  • Red Hat Enterprise Linux Client (v. 7) perf 3.10.0-327.36.3.el7, kernel 3.10.0-327.36.3.el7, python-perf 3.10.0-327.36.3.el7, kernel-tools 3.10.0-327.36.3.el7, kernel-tools-libs 3.10.0-327.36.3.el7, kernel-abi-whitelists 3.10.0-327.36.3.el7, +1 more Red Hat Enterprise Linux Client Optional (v. 7) kernel-debuginfo-common-x86_64 3.10.0-327.36.3.el7 Red Hat Enterprise Linux ComputeNode (v. 7) perf 3.10.0-327.36.3.el7, kernel 3.10.0-327.36.3.el7, python-perf 3.10.0-327.36.3.el7, kernel-tools 3.10.0-327.36.3.el7, kernel-tools-libs 3.10.0-327.36.3.el7, kernel-abi-whitelists 3.10.0-327.36.3.el7, +1 more
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2098
  • Red Hat Enterprise Linux ComputeNode EUS (v. 7.1) perf 3.10.0-229.42.2.el7, kernel 3.10.0-229.42.2.el7, kernel-tools 3.10.0-229.42.2.el7, kernel-tools-libs 3.10.0-229.42.2.el7, kernel-abi-whitelists 3.10.0-229.42.2.el7, kernel-debuginfo-common-x86_64 3.10.0-229.42.2.el7
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2118
  • Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-debuginfo-common-x86_64 3.10.0-327.36.3.el7
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2098
  • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.1) python-perf 3.10.0-229.42.2.el7, kernel-debuginfo-common-x86_64 3.10.0-229.42.2.el7
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2118
  • Red Hat Enterprise Linux Desktop (v. 5 client) kernel 2.6.18-416.el5, kernel-PAE 2.6.18-416.el5, kernel-xen 2.6.18-416.el5, kernel-debuginfo-common 2.6.18-416.el5
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2124
  • Red Hat Enterprise Linux Desktop (v. 6) perf 2.6.32-642.6.2.el6, kernel 2.6.32-642.6.2.el6, kernel-firmware 2.6.32-642.6.2.el6, kernel-abi-whitelists 2.6.32-642.6.2.el6, kernel-debuginfo-common-i686 2.6.32-642.6.2.el6, kernel-debuginfo-common-x86_64 2.6.32-642.6.2.el6 Red Hat Enterprise Linux Desktop Optional (v. 6) python-perf 2.6.32-642.6.2.el6, kernel-debuginfo-common-i686 2.6.32-642.6.2.el6, kernel-debuginfo-common-x86_64 2.6.32-642.6.2.el6
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2105
  • Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt 3.10.0-327.36.3.rt56.238.el7, kernel-rt-kvm 3.10.0-327.36.3.rt56.238.el7, kernel-rt-trace 3.10.0-327.36.3.rt56.238.el7, kernel-rt-debug-kvm 3.10.0-327.36.3.rt56.238.el7, kernel-rt-trace-kvm 3.10.0-327.36.3.rt56.238.el7, kernel-rt-debuginfo-common-x86_64 3.10.0-327.36.3.rt56.238.el7
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2110
show 28 more
  • Red Hat Enterprise Linux HPC Node (v. 6) perf 2.6.32-642.6.2.el6, kernel 2.6.32-642.6.2.el6, kernel-firmware 2.6.32-642.6.2.el6, kernel-abi-whitelists 2.6.32-642.6.2.el6, kernel-debuginfo-common-i686 2.6.32-642.6.2.el6, kernel-debuginfo-common-x86_64 2.6.32-642.6.2.el6
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2105
  • Red Hat Enterprise Linux HPC Node EUS (v. 6.6) perf 2.6.32-504.54.1.el6, kernel 2.6.32-504.54.1.el6, kernel-firmware 2.6.32-504.54.1.el6, kernel-abi-whitelists 2.6.32-504.54.1.el6, kernel-debuginfo-common-i686 2.6.32-504.54.1.el6, kernel-debuginfo-common-x86_64 2.6.32-504.54.1.el6
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2128
  • Red Hat Enterprise Linux HPC Node EUS (v. 6.7) perf 2.6.32-573.35.2.el6, kernel 2.6.32-573.35.2.el6, kernel-firmware 2.6.32-573.35.2.el6, kernel-abi-whitelists 2.6.32-573.35.2.el6, kernel-debuginfo-common-i686 2.6.32-573.35.2.el6, kernel-debuginfo-common-x86_64 2.6.32-573.35.2.el6
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2106
  • Red Hat Enterprise Linux HPC Node Optional (v. 6) python-perf 2.6.32-642.6.2.el6, kernel-debuginfo-common-x86_64 2.6.32-642.6.2.el6
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2105
  • Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.6) python-perf 2.6.32-504.54.1.el6, kernel-debuginfo-common-x86_64 2.6.32-504.54.1.el6
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2128
  • Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.7) python-perf 2.6.32-573.35.2.el6, kernel-debuginfo-common-x86_64 2.6.32-573.35.2.el6
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2106
  • Red Hat Enterprise Linux Long Life (v. 5.6 server) kernel 2.6.18-238.57.1.el5, kernel-PAE 2.6.18-238.57.1.el5, kernel-xen 2.6.18-238.57.1.el5, kernel-debuginfo-common 2.6.18-238.57.1.el5
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2127
  • Red Hat Enterprise Linux Long Life (v. 5.9 server) kernel 2.6.18-348.32.1.el5, kernel-PAE 2.6.18-348.32.1.el5, kernel-xen 2.6.18-348.32.1.el5, kernel-debuginfo-common 2.6.18-348.32.1.el5
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2126
  • Red Hat Enterprise Linux Realtime (v. 7) kernel-rt 3.10.0-327.36.3.rt56.238.el7, kernel-rt-trace 3.10.0-327.36.3.rt56.238.el7, kernel-rt-debuginfo-common-x86_64 3.10.0-327.36.3.rt56.238.el7
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2110
  • Red Hat Enterprise Linux Server (v. 6) perf 2.6.32-642.6.2.el6, kernel 2.6.32-642.6.2.el6, kernel-kdump 2.6.32-642.6.2.el6, kernel-firmware 2.6.32-642.6.2.el6, kernel-bootwrapper 2.6.32-642.6.2.el6, kernel-abi-whitelists 2.6.32-642.6.2.el6, +4 more
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2105
  • Red Hat Enterprise Linux Server (v. 7) perf 4.5.0-15.2.1.el7, kernel 4.5.0-15.2.1.el7, perf 3.10.0-327.36.3.el7, kernel 3.10.0-327.36.3.el7, python-perf 4.5.0-15.2.1.el7, kernel-tools 4.5.0-15.2.1.el7, +13 more
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2098
  • Red Hat Enterprise Linux Server AUS (v. 6.2) perf 2.6.32-220.68.1.el6, kernel 2.6.32-220.68.1.el6, kernel-firmware 2.6.32-220.68.1.el6, kernel-debuginfo-common-x86_64 2.6.32-220.68.1.el6
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2132
  • Red Hat Enterprise Linux Server AUS (v. 6.4) perf 2.6.32-358.75.1.el6, kernel 2.6.32-358.75.1.el6, kernel-firmware 2.6.32-358.75.1.el6, kernel-debuginfo-common-x86_64 2.6.32-358.75.1.el6
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2133
  • Red Hat Enterprise Linux Server AUS (v. 6.5) perf 2.6.32-431.75.1.el6, kernel 2.6.32-431.75.1.el6, kernel-firmware 2.6.32-431.75.1.el6, kernel-abi-whitelists 2.6.32-431.75.1.el6, kernel-debuginfo-common-x86_64 2.6.32-431.75.1.el6
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2120
  • Red Hat Enterprise Linux Server EUS (v. 6.6) perf 2.6.32-504.54.1.el6, kernel 2.6.32-504.54.1.el6, kernel-kdump 2.6.32-504.54.1.el6, kernel-firmware 2.6.32-504.54.1.el6, kernel-bootwrapper 2.6.32-504.54.1.el6, kernel-abi-whitelists 2.6.32-504.54.1.el6, +4 more
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2128
  • Red Hat Enterprise Linux Server EUS (v. 6.7) perf 2.6.32-573.35.2.el6, kernel 2.6.32-573.35.2.el6, kernel-kdump 2.6.32-573.35.2.el6, kernel-firmware 2.6.32-573.35.2.el6, kernel-bootwrapper 2.6.32-573.35.2.el6, kernel-abi-whitelists 2.6.32-573.35.2.el6, +4 more
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2106
  • Red Hat Enterprise Linux Server EUS (v. 7.1) perf 3.10.0-229.42.2.el7, kernel 3.10.0-229.42.2.el7, perf 3.10.0-229.42.2.ael7b, kernel 3.10.0-229.42.2.ael7b, kernel-kdump 3.10.0-229.42.2.el7, kernel-tools 3.10.0-229.42.2.el7, +11 more
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2118
  • Red Hat Enterprise Linux Server Optional (v. 6) python-perf 2.6.32-642.6.2.el6, kernel-debuginfo-common-i686 2.6.32-642.6.2.el6, kernel-debuginfo-common-ppc64 2.6.32-642.6.2.el6, kernel-debuginfo-common-s390x 2.6.32-642.6.2.el6, kernel-debuginfo-common-x86_64 2.6.32-642.6.2.el6
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2105
  • Red Hat Enterprise Linux Server Optional (v. 7) kernel-debuginfo-common-aarch64 4.5.0-15.2.1.el7, kernel-debuginfo-common-ppc64 3.10.0-327.36.3.el7, kernel-debuginfo-common-x86_64 3.10.0-327.36.3.el7, kernel-debuginfo-common-ppc64le 3.10.0-327.36.3.el7
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2098
  • Red Hat Enterprise Linux Server Optional AUS (v. 6.2) kernel 2.6.32-220.68.1.el6, python-perf 2.6.32-220.68.1.el6, kernel-debuginfo-common-x86_64 2.6.32-220.68.1.el6
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2132
  • Red Hat Enterprise Linux Server Optional AUS (v. 6.4) kernel 2.6.32-358.75.1.el6, python-perf 2.6.32-358.75.1.el6, kernel-debuginfo-common-x86_64 2.6.32-358.75.1.el6
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2133
  • Red Hat Enterprise Linux Server Optional AUS (v. 6.5) kernel 2.6.32-431.75.1.el6, python-perf 2.6.32-431.75.1.el6, kernel-debuginfo-common-x86_64 2.6.32-431.75.1.el6
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2120
  • Red Hat Enterprise Linux Server Optional EUS (v. 6.6) python-perf 2.6.32-504.54.1.el6, kernel-debuginfo-common-i686 2.6.32-504.54.1.el6, kernel-debuginfo-common-ppc64 2.6.32-504.54.1.el6, kernel-debuginfo-common-s390x 2.6.32-504.54.1.el6, kernel-debuginfo-common-x86_64 2.6.32-504.54.1.el6
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2128
  • Red Hat Enterprise Linux Server Optional EUS (v. 6.7) python-perf 2.6.32-573.35.2.el6, kernel-debuginfo-common-i686 2.6.32-573.35.2.el6, kernel-debuginfo-common-ppc64 2.6.32-573.35.2.el6, kernel-debuginfo-common-s390x 2.6.32-573.35.2.el6, kernel-debuginfo-common-x86_64 2.6.32-573.35.2.el6
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2106
  • Red Hat Enterprise Linux Server Optional EUS (v. 7.1) python-perf 3.10.0-229.42.2.el7, python-perf 3.10.0-229.42.2.ael7b, kernel-debuginfo-common-ppc64 3.10.0-229.42.2.el7, kernel-debuginfo-common-s390x 3.10.0-229.42.2.el7, kernel-debuginfo-common-x86_64 3.10.0-229.42.2.el7, kernel-debuginfo-common-ppc64le 3.10.0-229.42.2.ael7b
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2118
  • Red Hat Enterprise Linux Server Optional TUS (v. 6.5) kernel 2.6.32-431.75.1.el6, python-perf 2.6.32-431.75.1.el6, kernel-debuginfo-common-x86_64 2.6.32-431.75.1.el6 Red Hat Enterprise Linux Server TUS (v. 6.5) perf 2.6.32-431.75.1.el6, kernel 2.6.32-431.75.1.el6, kernel-firmware 2.6.32-431.75.1.el6, kernel-abi-whitelists 2.6.32-431.75.1.el6, kernel-debuginfo-common-x86_64 2.6.32-431.75.1.el6
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2120
  • Red Hat Enterprise Linux Workstation (v. 6) perf 2.6.32-642.6.2.el6, kernel 2.6.32-642.6.2.el6, kernel-firmware 2.6.32-642.6.2.el6, kernel-abi-whitelists 2.6.32-642.6.2.el6, kernel-debuginfo-common-i686 2.6.32-642.6.2.el6, kernel-debuginfo-common-x86_64 2.6.32-642.6.2.el6
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2105
  • Red Hat Enterprise Linux Workstation (v. 7) perf 3.10.0-327.36.3.el7, kernel 3.10.0-327.36.3.el7, python-perf 3.10.0-327.36.3.el7, kernel-tools 3.10.0-327.36.3.el7, kernel-tools-libs 3.10.0-327.36.3.el7, kernel-abi-whitelists 3.10.0-327.36.3.el7, +1 more
    fixed: vendor fix “Please see bug 1384344 comment #13 (https://bugzilla.redhat.com/show_bug.cgi?id=1384344#c13) for details on how to mitigate this issue.” RHSA-2016:2098

3 more fixed, 1 more not affected in the full advisory

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Timeline

  1. 0-day patched (Project Zero)
  2. First public exploit (EDB-40611)
  3. Published
  4. Added to CISA KEV
  5. CISA patch deadline
  6. CISA SSVC: exploitation active

Known exploited

Added
4 y ago
Patch by
2022-03-24 (4 y ago)
Ransomware
Not known
Required action
Apply updates per vendor instructions.
Vendor, product
Linux, Kernel
CISA name
Linux Kernel Race Condition Vulnerability

Zero-day

Detected in real attacks while still unknown to the vendor and the public, per Google Project Zero's 0day In-the-Wild tracker.

Patched
2016-10-18
Details
project zero tracker

CISA SSVC

Exploitation
Active, exploited in the wild
Automatable
no
Technical impact
total
Assessed
21 mo ago

Exploit prediction

83.52% chance of exploitation in the next 30 days, higher than 99.6% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

  • EDB-40847 Linux Kernel 2.6.22 < 3.9 - 'Dirty COW /proc/self/mem' Race Condition Privilege Escalation (/etc/passwd Method) local, 2016-11-27
  • EDB-40839 Linux Kernel 2.6.22 < 3.9 - 'Dirty COW' 'PTRACE_POKEDATA' Race Condition Privilege Escalation (/etc/passwd Method) local, 2016-11-28
  • EDB-40838 Linux Kernel 2.6.22 < 3.9 - 'Dirty COW PTRACE_POKEDATA' Race Condition (Write Access Method) local, 2016-10-26
  • EDB-40616 Linux Kernel 2.6.22 < 3.9 (x86/x64) - 'Dirty COW /proc/self/mem' Race Condition Privilege Escalation (SUID Method) local, 2016-10-21
  • EDB-40611 Linux Kernel 2.6.22 < 3.9 - 'Dirty COW' /proc/self/mem Race Condition (Write Access Method) local, 2016-10-19
  • packetstormsecurity.com http://packetstormsecurity.com/files/139277/Kernel-Live-Patch-Security-Notice-LSN-0012-1.html referenced PoC, tagged "exploit" by a source, unverified
  • packetstormsecurity.com http://packetstormsecurity.com/files/139286/DirtyCow-Linux-Kernel-Race-Condition.html referenced PoC, tagged "exploit" by a source, unverified
  • packetstormsecurity.com http://packetstormsecurity.com/files/139287/DirtyCow-Local-Root-Proof-Of-Concept.html referenced PoC, tagged "exploit" by a source, unverified
  • packetstormsecurity.com http://packetstormsecurity.com/files/139922/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html referenced PoC, tagged "exploit" by a source, unverified
  • packetstormsecurity.com http://packetstormsecurity.com/files/139923/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html referenced PoC, tagged "exploit" by a source, unverified
  • bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=1384344 referenced PoC, tagged "exploit" by a source, unverified
  • github.com https://github.com/dirtycow/dirtycow.github.io/wiki/VulnerabilityDetails referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by version score vector
CISA ADP 3.1 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD 3.1 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA 3.1 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C

Classification

Weakness
  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization
Technology feeds

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.