cyfenced.com →

[ CVE-2016-5195 · Published 10 Nov 2016 ]

Linux Kernel Race Condition Vulnerability

Exploited · CISA KEV CVSS 7.0 EPSS 84%Fix available

[ Why it matters ]Priority signals

  • Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2022-03-03
  • EPSS: 84% chance of exploitation in the next 30 days (higher than 100% of CVEs)

[ Description ]Official description

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."

CISA: Race condition in mm/gup.c in the Linux kernel allows local users to escalate privileges.

[ Fixes ]Fixes and patches

CISA required action (US federal deadline 24 Mar 2022): Apply updates per vendor instructions.

[ References ]References