---
cve: "CVE-2016-5195"
severity: "HIGH"
cvss: 7.0
epss: "83.5%"
vendor: "n/a"
kev: true
exploited: true
published: "2016-11-10 21:59:00"
tags: [cve, security, high]
source: tsecurity.de CVE-Dossier
exported: "2026-09-06T02:43:02+02:00"
---

# CVE-2016-5195

> 7.0 HIGH · ⚠️ CISA KEV (1648 Tage) · 🔓 Exploited · 🧪 PoC

## Beschreibung

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."

## CVSS-Vektor

```
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Lokal | good |
| AC Komplexität | Hoch | good |
| PR Privilegien | Gering | warn |
| UI Interaktion | Keine | bad |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Exploit-Evidenz

- [EDB-40839 — Linux Kernel 2.6.22 < 3.9 - 'Dirty COW' 'PTRACE_POKEDATA' Race Condition Privilege Escalation (/etc/passwd Method)](https://www.exploit-db.com/exploits/40839) ✅
- [EDB-40847 — Linux Kernel 2.6.22 < 3.9 - 'Dirty COW /proc/self/mem' Race Condition Privilege Escalation (/etc/passwd Method)](https://www.exploit-db.com/exploits/40847) ✅
- [EDB-40616 — Linux Kernel 2.6.22 < 3.9 (x86/x64) - 'Dirty COW /proc/self/mem' Race Condition Privilege Escalation (SUID Method)](https://www.exploit-db.com/exploits/40616) ✅
- [EDB-40611 — Linux Kernel 2.6.22 < 3.9 - 'Dirty COW' /proc/self/mem Race Condition (Write Access Method)](https://www.exploit-db.com/exploits/40611) ✅
- [EDB-40838 — Linux Kernel 2.6.22 < 3.9 - 'Dirty COW PTRACE_POKEDATA' Race Condition (Write Access Method)](https://www.exploit-db.com/exploits/40838)

## Patch verfügbar (OSV)

- 19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619 (Commit)
- 19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619 (Commit)

## Referenzen

- <http://rhn.redhat.com/errata/RHSA-2016-2107.html>
- <https://www.exploit-db.com/exploits/40616/>
- <https://access.redhat.com/errata/RHSA-2017:0372>
- <https://bto.bluecoat.com/security-advisory/sa134>
- <https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05352241>
- <http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html>
- <https://www.exploit-db.com/exploits/40839/>
- <https://dirtycow.ninja>
- <https://www.exploit-db.com/exploits/40847/>
- <http://rhn.redhat.com/errata/RHSA-2016-2118.html>
- <http://rhn.redhat.com/errata/RHSA-2016-2128.html>
- <https://source.android.com/security/bulletin/2016-12-01.html>
- <http://rhn.redhat.com/errata/RHSA-2016-2120.html>
- <http://www.openwall.com/lists/oss-security/2016/10/26/7>
- <http://rhn.redhat.com/errata/RHSA-2016-2133.html>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2016-5195) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_