CVE-2016-5195
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."
Explotada activamente
- En el catálogo CISA de vulnerabilidades explotadas desde el 3 mar 2022
- Las agencias federales de EE. UU. deben corregirla antes del 24 mar 2022 (BOD 22-01)
- Atacada 24 días antes de que la vulnerabilidad se hiciera pública
Apply updates per vendor instructions.
Fuente: CISA KEV · 11 ago 2026 21 nov 2025 23 sept 2025 22 ago 2025 4 ago 2025 29 jul 2025
Puntuación CVSS7.0 / 10
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HTipo de debilidad (CWE)CWE-362, CWE-362
Fabricantesredhat, debian, netapp, linux, fedoraproject, paloaltonetworks, canonical
Productos afectados
| Fabricantes | Prodotto | Versioni |
|---|---|---|
| canonical | ubuntu linux | 12.04 |
| linux | linux kernel | < 3.2.83 |
| redhat | enterprise linux | 5 |
| redhat | enterprise linux aus | 6.2 |
| redhat | enterprise linux eus | 6.6 |
| redhat | enterprise linux long life | 5.6 |
| redhat | enterprise linux tus | 6.5 |
| debian | debian linux | 7.0 |
| fedoraproject | fedora | 23 |
| paloaltonetworks | pan-os | < 7.0.14 |
| netapp | cloud backup | - |
| netapp | hci storage nodes | - |
| netapp | oncommand balance | - |
| netapp | oncommand performance manager | - |
| netapp | oncommand unified manager for clustered data ontap | - |
| netapp | ontap select deploy administration utility | - |
| netapp | snapprotect | - |
| netapp | solidfire | - |
Artículos relacionados
This product uses the NVD API but is not endorsed or certified by the NVD.