Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2016-5195 Details

Description

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."

Metrics

CVSS 3.x Severity and Vector Strings:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2016-5195 CISA-ADPUS Government Resource
http://fortiguard.com/advisory/FG-IR-16-063 CVEThird Party Advisory
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619 CVEIssue TrackingPatchVendor Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10770 CVEThird Party Advisory
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10774 CVEThird Party Advisory

see all 254 references

This CVE is in CISA's Known Exploited Vulnerabilities Catalog

Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.

Vulnerability NameDate AddedDue DateRequired Action
Linux Kernel Race Condition VulnerabilityMar 3, 2022Mar 24, 2022Apply updates per vendor instructions.

Weakness Enumeration

CWE-IDCWE NameSource
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')[email protected]
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')CISA-ADP

Affected Products

ProductVersions

Change History

46 change records found show changes


QUICK INFO

CVE Dictionary Entry:
CVE-2016-5195
NVD Published Date:
Nov 10, 2016
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2016-5195 Details - Not Deferred