← Back to CVE List
Vulnerability Analysis

CVE-2016-5195

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."

CISA KEV
CVSS Base Score
7.0
HIGH
Exploitability:1.1
Impact Score:5.9
Temporal Score:-
EPSS:83.52%

Threat Intelligence Signals

CISA KEV
YES
KEV Date Added
2022-03-03
Ransomware Use
Unknown
KEV Due Date
2022-03-24
VulnCheck In-the-Wild
No
Nuclei Template
No
EPSS Score
83.524%
EPSS Percentile
99.6th pct
GitHub Severity
HIGH
SSVC Exploitation
SSVC Automatable
Vulnerability Class

Identity & Timeline

Status-
Assigning Authority-
CVSS Version / Source-
Reserved-
Published-
Patch Date (date_public)-
Exploit DB Date-
First GitHub PoC Date-
Last Updated-
Time to Patch (Days to fix)-
Exploit Release Gap-
PoC Release Gap-
Exploit DB ReferencesNone identified

Affected Products & Versions

Vendor Product Affected Versions
No affected products specified.

References

No reference links found.

LINK COPIED TO CLIPBOARD