{"id":"CVE-2016-5195","url":"https://www.cyber-defence.io/tools/cve/CVE-2016-5195","generatedAt":"2026-10-27T19:49:24.643Z","title":"Linux Kernel Race Condition Vulnerability","description":"Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka \"Dirty COW.\"","published":"2016-11-10T21:59:00.000Z","lastModified":"2026-06-17T00:48:57.000Z","status":"Analyzed","sourceIdentifier":"chrome-cve-admin@google.com","cvss":{"version":"3.1","score":7,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-362"],"affected":["canonical/ubuntu linux","linux/linux kernel","redhat/enterprise linux","redhat/enterprise linux aus","redhat/enterprise linux eus","redhat/enterprise linux long life","redhat/enterprise linux tus","debian/debian linux","fedoraproject/fedora","paloaltonetworks/pan-os","netapp/cloud backup","netapp/hci storage nodes","netapp/oncommand balance","netapp/oncommand performance manager","netapp/oncommand unified manager for clustered data ontap","netapp/ontap select deploy administration utility","netapp/snapprotect","netapp/solidfire"],"epss":{"score":0.83524,"percentile":0.99682,"date":"2026-10-26","history":[]},"kev":{"listed":true,"dateAdded":"2022-03-03","dueDate":"2022-03-24","knownRansomwareCampaignUse":"Unknown","notes":"Apply updates per vendor instructions.\nhttps://nvd.nist.gov/vuln/detail/CVE-2016-5195"},"exploits":{"count":5,"verified":true,"firstPublished":"2016-10-19","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":40839,"kind":"exploit","title":"Linux Kernel 2.6.22 < 3.9 - 'Dirty COW' 'PTRACE_POKEDATA' Race Condition Privilege Escalation (/etc/passwd Method)","url":"https://www.exploit-db.com/exploits/40839","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/40839.c","file":"exploits/linux/local/40839.c","published":"2016-11-28","added":"2016-11-28","updated":"2017-11-28","author":"FireFart","type":"local","platform":"linux","port":null,"verified":true,"codes":["CVE-2016-5195"],"tags":null,"aliases":"dirty cow;dirty.c;dirtycow","applicationUrl":"http://www.exploit-db.comlinux-3.13.1.tar.gz","screenshotUrl":"http://www.exploit-db.com/screenshots/idlt41000/screen-shot-2016-11-29-at-173530.png","referenceUrl":"https://github.com/FireFart/dirtycow/blob/2580beeef4063124df89d0f650e5f199fcdd09ff/dirty.c"},{"edbId":40847,"kind":"exploit","title":"Linux Kernel 2.6.22 < 3.9 - 'Dirty COW /proc/self/mem' Race Condition Privilege Escalation (/etc/passwd Method)","url":"https://www.exploit-db.com/exploits/40847","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/40847.cpp","file":"exploits/linux/local/40847.cpp","published":"2016-11-27","added":"2016-11-29","updated":"2017-07-24","author":"Gabriele Bonacini","type":"local","platform":"linux","port":null,"verified":true,"codes":["CVE-2016-5195"],"tags":null,"aliases":"dcow.cpp;dirty cow;dirtycow","applicationUrl":"http://www.exploit-db.comlinux-3.13.1.tar.gz","screenshotUrl":"http://www.exploit-db.com/screenshots/idlt41000/screen-shot-2016-11-29-at-141937.png","referenceUrl":"https://github.com/gbonacini/CVE-2016-5195/blob/fd9929d60ab928a46356506e414d8961661febb5/dcow.cpp"},{"edbId":40838,"kind":"exploit","title":"Linux Kernel 2.6.22 < 3.9 - 'Dirty COW PTRACE_POKEDATA' Race Condition (Write Access Method)","url":"https://www.exploit-db.com/exploits/40838","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/40838.c","file":"exploits/linux/local/40838.c","published":"2016-10-26","added":"2016-11-28","updated":"2017-07-24","author":"Phil Oester","type":"local","platform":"linux","port":null,"verified":false,"codes":["CVE-2016-5195"],"tags":null,"aliases":"dirty cow;dirtycow;pokemon.c","applicationUrl":"http://www.exploit-db.comlinux-3.13.1.tar.gz","screenshotUrl":null,"referenceUrl":"https://github.com/dirtycow/dirtycow.github.io/blob/ad8cfe63c1db2a27b609226c040a3ce3299fff3a/pokemon.c"},{"edbId":40616,"kind":"exploit","title":"Linux Kernel 2.6.22 < 3.9 (x86/x64) - 'Dirty COW /proc/self/mem' Race Condition Privilege Escalation (SUID Method)","url":"https://www.exploit-db.com/exploits/40616","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/40616.c","file":"exploits/linux/local/40616.c","published":"2016-10-21","added":"2016-10-21","updated":"2017-07-24","author":"Robin Verton","type":"local","platform":"linux","port":null,"verified":true,"codes":["CVE-2016-5195"],"tags":null,"aliases":"cowroot;cowroot.c;dirtycow","applicationUrl":"http://www.exploit-db.comlinux-3.13.1.tar.gz","screenshotUrl":"http://www.exploit-db.com/screenshots/idlt41000/screen-shot-2016-11-29-at-142815.png","referenceUrl":null},{"edbId":40611,"kind":"exploit","title":"Linux Kernel 2.6.22 < 3.9 - 'Dirty COW' /proc/self/mem Race Condition (Write Access Method)","url":"https://www.exploit-db.com/exploits/40611","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/40611.c","file":"exploits/linux/local/40611.c","published":"2016-10-19","added":"2016-10-21","updated":"2017-09-18","author":"Phil Oester","type":"local","platform":"linux","port":null,"verified":true,"codes":["CVE-2016-5195"],"tags":null,"aliases":"dirtyc0w;dirtyc0w.c;dirtycow","applicationUrl":"http://www.exploit-db.comlinux-3.13.1.tar.gz","screenshotUrl":null,"referenceUrl":"https://github.com/dirtycow/dirtycow.github.io/blob/866a2fdf425d084d7a9576e866db1a80c640f841/dirtyc0w.c"}]},"verdict":{"level":"urgent","text":"Known to be exploited in the wild (CISA KEV, CISA remediation deadline 24 March 2022). Treat as an emergency change: patch or isolate now, then hunt for prior compromise."},"changes":[],"references":[{"url":"http://fortiguard.com/advisory/FG-IR-16-063","tags":["Third Party Advisory"],"source":"chrome-cve-admin@google.com"},{"url":"http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619","tags":["Issue Tracking","Patch","Vendor Advisory"],"source":"chrome-cve-admin@google.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10770","tags":["Third Party Advisory"],"source":"chrome-cve-admin@google.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10774","tags":["Third Party Advisory"],"source":"chrome-cve-admin@google.com"},{"url":"http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10807","tags":["Third Party Advisory"],"source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00034.html","tags":["Mailing List"],"source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00035.html","tags":["Mailing List"],"source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00036.html","tags":["Mailing List"],"source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00038.html","tags":["Mailing List"],"source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00039.html","tags":["Mailing List"],"source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00040.html","tags":["Mailing List"],"source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00045.html","tags":["Mailing List"],"source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00048.html","tags":["Mailing List"],"source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00049.html","tags":["Mailing List"],"source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00050.html","tags":["Mailing List"],"source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00051.html","tags":["Mailing List"],"source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00052.html","tags":["Mailing List"],"source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00053.html","tags":["Mailing List"],"source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00054.html","tags":["Mailing List"],"source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00055.html","tags":["Mailing List"],"source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00056.html","tags":["Mailing List"],"source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00057.html","tags":["Mailing List"],"source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00058.html","tags":["Mailing List"],"source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html","tags":["Mailing List"],"source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00064.html","tags":["Mailing List"],"source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00065.html","tags":["Mailing List"],"source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00066.html","tags":["Mailing List"],"source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00067.html","tags":["Mailing List"],"source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00072.html","tags":["Mailing List"],"source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00033.html","tags":["Mailing List"],"source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00100.html","tags":["Mailing List"],"source":"chrome-cve-admin@google.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html","tags":["Third Party Advisory"],"source":"chrome-cve-admin@google.com"},{"url":"http://packetstormsecurity.com/files/139277/Kernel-Live-Patch-Security-Notice-LSN-0012-1.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"chrome-cve-admin@google.com"},{"url":"http://packetstormsecurity.com/files/139286/DirtyCow-Linux-Kernel-Race-Condition.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"chrome-cve-admin@google.com"},{"url":"http://packetstormsecurity.com/files/139287/DirtyCow-Local-Root-Proof-Of-Concept.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"chrome-cve-admin@google.com"},{"url":"http://packetstormsecurity.com/files/139922/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"chrome-cve-admin@google.com"},{"url":"http://packetstormsecurity.com/files/139923/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"chrome-cve-admin@google.com"},{"url":"http://packetstormsecurity.com/files/142151/Kernel-Live-Patch-Security-Notice-LSN-0021-1.html","tags":["Third Party Advisory","VDB Entry"],"source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2098.html","tags":["Third Party Advisory"],"source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2105.html","tags":["Third Party Advisory"],"source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2106.html","tags":["Third Party Advisory"],"source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2107.html","tags":["Third Party Advisory"],"source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2110.html","tags":["Third Party Advisory"],"source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2118.html","tags":["Third Party Advisory"],"source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2120.html","tags":["Third Party Advisory"],"source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2124.html","tags":["Third Party Advisory"],"source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2126.html","tags":["Third Party Advisory"],"source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2127.html","tags":["Third Party Advisory"],"source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2128.html","tags":["Third Party Advisory"],"source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2132.html","tags":["Third Party Advisory"],"source":"chrome-cve-admin@google.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2016-2133.html","tags":["Third Party Advisory"],"source":"chrome-cve-admin@google.com"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-linux","tags":["Third Party Advisory"],"source":"chrome-cve-admin@google.com"},{"url":"http://www.debian.org/security/2016/dsa-3696","tags":["Third Party Advisory"],"source":"chrome-cve-admin@google.com"},{"url":"http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161207-01-dirtycow-en","tags":["Third Party Advisory"],"source":"chrome-cve-admin@google.com"},{"url":"http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.3","tags":["Release Notes"],"source":"chrome-cve-admin@google.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/10/21/1","tags":["Mailing List","Third Party Advisory"],"source":"chrome-cve-admin@google.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/10/26/7","tags":["Mailing List","Third Party Advisory"],"source":"chrome-cve-admin@google.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/10/27/13","tags":["Mailing List","Third Party Advisory"],"source":"chrome-cve-admin@google.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/10/30/1","tags":["Mailing List","Third Party Advisory"],"source":"chrome-cve-admin@google.com"},{"url":"http://www.openwall.com/lists/oss-security/2016/11/03/7","tags":["Mailing List","Third Party Advisory"],"source":"chrome-cve-admin@google.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2016-5195","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}