CVE-2016-5195

Katalog CVE

CVSS 7.0 · High KEV · sudah dieksploitasi EPSS 83,5%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada canonical ubuntu linux, linux kernel +16 lainnya. Skor CVSS 3.1 7.0 (High) menurut NVD. Masuk katalog KEV CISA pada 3 Maret 2022, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."

Rincian

Terbit di NVD

10 November 2016

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.0 (High), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

83,5% peluang dieksploitasi; lebih tinggi dari 99,6% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama

Linux Kernel Race Condition Vulnerability

Masuk KEV

3 Maret 2022

Tenggat CISA

24 Maret 2022 (untuk instansi federal AS)

Ransomware

Belum tercatat

Tindakan wajib

Apply updates per vendor instructions.

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8... issue tracking · patch · advisory vendor
• http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html patch · advisory pihak ketiga
• https://github.com/torvalds/linux/commit/19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619 issue tracking · patch
• https://www.kb.cert.org/vuls/id/243144 advisory pihak ketiga · pemerintah AS
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-5195 pemerintah AS
• http://fortiguard.com/advisory/FG-IR-16-063 advisory pihak ketiga
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10770 advisory pihak ketiga
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10774 advisory pihak ketiga
• http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10807 advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html advisory pihak ketiga
• http://packetstormsecurity.com/files/139277/Kernel-Live-Patch-Security-Notice-LSN-0012-1.html exploit · advisory pihak ketiga · vdb entry
• http://packetstormsecurity.com/files/139286/DirtyCow-Linux-Kernel-Race-Condition.html exploit · advisory pihak ketiga · vdb entry
• http://packetstormsecurity.com/files/139287/DirtyCow-Local-Root-Proof-Of-Concept.html exploit · advisory pihak ketiga · vdb entry
• http://packetstormsecurity.com/files/139922/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html exploit · advisory pihak ketiga · vdb entry
• http://packetstormsecurity.com/files/139923/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html exploit · advisory pihak ketiga · vdb entry
• http://packetstormsecurity.com/files/142151/Kernel-Live-Patch-Security-Notice-LSN-0021-1.html advisory pihak ketiga · vdb entry
• http://rhn.redhat.com/errata/RHSA-2016-2098.html advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2016-2105.html advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2016-2106.html advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2016-2107.html advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2016-2110.html advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2016-2118.html advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2016-2120.html advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2016-2124.html advisory pihak ketiga
• http://rhn.redhat.com/errata/RHSA-2016-2126.html advisory pihak ketiga