CVE-2016-5195 — CVE & Security Advisory Radar

🎯 CVE-2016-5195 HIGH 7.0 🔥 EPSS 83.5% ⚠️ CISA KEV · 1648 T 🔓 Exploited 🧪 PoC 🇪🇺 EUVD

📄 .md Alle CVEs anzeigen ✕

CVE-2016-5195 | Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."

Klassifikation & Betroffenheit:

n/a n/a n/acanonical ubuntu_linux 12.04canonical ubuntu_linux 14.04canonical ubuntu_linux 16.04canonical ubuntu_linux 16.10linux linux_kernel *redhat enterprise_linux 5redhat enterprise_linux 6.0

Improper Control of Generation of Code ('Code Injection') 🎯 Medium

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

🛡️ Empfohlene Mitigation: Refactor your program so that you do not have to dynamically generate code.

Vollständige Definition bei MITRE ➔

⚔️ Typische Angriffsmuster (CAPEC):

CAPEC-35 · Leverage Executable Code in Non-Executab… (Very High) CAPEC-77 · Manipulating User-Controlled Variables (Very High) CAPEC-242 · Code Injection (High)

🎯 ATT&CK-Techniken (Kill-Chain-Verhalten):

T1027.006 · Obfuscated Files or Information: H… T1027.009 · Obfuscated Files or Information: E… T1564.009 · Hide Artifacts: Resource Forking

🧩 Ähnliche Schwachstellen (Hersteller/Klasse/Score-Band):

CVE-2026-20898 8.5 CVE-2026-51583 8.5 CVE-2026-14606 8.5 CVE-2026-14605 8.5 CVE-2026-20767 8.5

🧪 Exploit-Evidenz: EDB-40839 · Linux Kernel 2.6.22 < 3.9 - 'Dirty COW' 'PTRACE_POKEDATA' Race Conditi verified EDB-40847 · Linux Kernel 2.6.22 < 3.9 - 'Dirty COW /proc/self/mem' Race Condition verified EDB-40616 · Linux Kernel 2.6.22 < 3.9 (x86/x64) - 'Dirty COW /proc/self/mem' Race verified EDB-40611 · Linux Kernel 2.6.22 < 3.9 - 'Dirty COW' /proc/self/mem Race Condition verified

🐙 ASRTeam/CVE-2016-5195 🐙 timwr/CVE-2016-5195 🐙 xlucas/dirtycow.cr 🐙 istenrot/centos-dirty-cow-ansibl 🐙 pgporada/ansible-role-cve

🩹 Patch verfügbar (OSV):

🩹 19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619 (Commit) 🩹 19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619 (Commit)

📚 Referenzen & Quellen:

🇪🇺 Original-Eintrag (ENISA EUVD) 🇺🇸 NVD-Eintrag

Ausnutzungs-Zeitleiste:

Reserviert 2016

Veröffentlicht 11/2016

Im KEV seit 03/2022

Heute 06.09.

CVSS-Vektor-Analyse: 7.0

AV · Angriffsvektor Lokal

AC · Komplexität Hoch

PR · Privilegien Gering

UI · Interaktion Keine

S · Scope Unverändert

C · Vertraulichkeit Hoch

I · Integrität Hoch

A · Verfügbarkeit Hoch

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Veröffentlicht:10.11.2016

Aktualisiert:17.06.2026 00:48

Assigner (CNA):Chrome

EUVD-ID:EUVD-2016-6146

Quellen: 🇪🇺 EUVD-Datenbank (ENISA) + 🇺🇸 NVD-Anreicherung · 24-h-Cache

CWE-94: Code Injection ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Sicherheits-Update des Herstellers zeitnah einspielen und Netzwerksegmentierung prüfen.

Tier	2026-08-29	2026-09-05
≥90 %	4	0
≥50 %	4	0
≥10 %	3	0
<10 %	304	300

7.0 HIGH

🇪🇺 EUVD ⚠️ KEV

EPSS

83.5%

CVE-2016-5195 💻 Lokal 🔑 Geringe Nutzerrechte nötig

🔓 🧪 n/a

CVE-2016-5195 | Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."

CWE-94: Code Injection ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Sicherheits-Update des Herstellers zeitnah einspielen und Netzwerksegmentierung prüfen.

10.11.2016

🛡️ Details ➔

CVE-2016-5195 | Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."

Zero-Day & Vulnerability Intelligence Hub

CVE-2016-5195 | Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."