Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
History
07 Nov 2023, 02:33
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
17 Jan 2023, 21:00
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:* cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:* |
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:-:*:*:* cpe:2.3:o:canonical:ubuntu_linux:16.10:*:*:*:*:*:*:* cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* |
References | (UBUNTU) http://www.ubuntu.com/usn/USN-3105-2 - Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00040.html - Mailing List, Third Party Advisory | |
References | (UBUNTU) http://www.ubuntu.com/usn/USN-3104-1 - Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00052.html - Mailing List, Third Party Advisory | |
References | (MISC) https://www.arista.com/en/support/advisories-notices/security-advisories/1753-security-advisory-0026 - Third Party Advisory | |
References | (MLIST) http://www.openwall.com/lists/oss-security/2022/08/08/2 - Mailing List, Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00065.html - Mailing List, Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00053.html - Mailing List, Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00039.html - Mailing List, Third Party Advisory | |
References | (UBUNTU) http://www.ubuntu.com/usn/USN-3104-2 - Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00054.html - Mailing List, Third Party Advisory | |
References | (UBUNTU) http://www.ubuntu.com/usn/USN-3105-1 - Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00038.html - Mailing List, Third Party Advisory | |
References | (MLIST) http://www.openwall.com/lists/oss-security/2022/08/08/7 - Mailing List, Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00050.html - Mailing List, Third Party Advisory | |
References | (MLIST) http://www.openwall.com/lists/oss-security/2016/10/30/1 - Mailing List, Third Party Advisory | |
References | (MLIST) http://www.openwall.com/lists/oss-security/2022/08/08/8 - Mailing List, Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00035.html - Mailing List, Third Party Advisory | |
References | (UBUNTU) http://www.ubuntu.com/usn/USN-3107-1 - Third Party Advisory | |
References | (UBUNTU) http://www.ubuntu.com/usn/USN-3106-4 - Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00056.html - Mailing List, Third Party Advisory | |
References | (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W3APRVDVPDBXLH4DC5UKZVCR742MJIM3/ - Mailing List, Third Party Advisory | |
References | (CONFIRM) http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10770 - Third Party Advisory | |
References | (CONFIRM) https://kc.mcafee.com/corporate/index?page=content&id=SB10222 - Third Party Advisory | |
References | (BUGTRAQ) http://www.securityfocus.com/archive/1/archive/1/540344/100/0/threaded - Third Party Advisory, VDB Entry | |
References | (CONFIRM) http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161207-01-dirtycow-en - Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00067.html - Mailing List, Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00100.html - Mailing List, Third Party Advisory | |
References | (CONFIRM) http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10774 - Third Party Advisory | |
References | (BUGTRAQ) http://www.securityfocus.com/archive/1/archive/1/540736/100/0/threaded - Third Party Advisory, VDB Entry | |
References | (MISC) http://packetstormsecurity.com/files/139922/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html - Third Party Advisory, VDB Entry | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00055.html - Mailing List, Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00048.html - Mailing List, Third Party Advisory | |
References | (MLIST) http://www.openwall.com/lists/oss-security/2022/03/07/1 - Mailing List, Third Party Advisory | |
References | (CONFIRM) http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10807 - Third Party Advisory | |
References | (CONFIRM) https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05352241 - Third Party Advisory | |
References | (MISC) http://packetstormsecurity.com/files/139277/Kernel-Live-Patch-Security-Notice-LSN-0012-1.html - Third Party Advisory, VDB Entry | |
References | (BUGTRAQ) http://www.securityfocus.com/archive/1/archive/1/540252/100/0/threaded - Third Party Advisory, VDB Entry | |
References | (UBUNTU) http://www.ubuntu.com/usn/USN-3106-2 - Third Party Advisory | |
References | (UBUNTU) http://www.ubuntu.com/usn/USN-3106-1 - Third Party Advisory | |
References | (MISC) http://packetstormsecurity.com/files/139923/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html - Third Party Advisory, VDB Entry | |
References | (DEBIAN) http://www.debian.org/security/2016/dsa-3696 - Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00064.html - Mailing List, Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00072.html - Mailing List, Third Party Advisory | |
References | (BUGTRAQ) http://www.securityfocus.com/archive/1/540344/100/0/threaded - Third Party Advisory, VDB Entry | |
References | (CISCO) https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-vcsd - Third Party Advisory | |
References | (MISC) http://packetstormsecurity.com/files/139286/DirtyCow-Linux-Kernel-Race-Condition.html - Third Party Advisory, VDB Entry | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00051.html - Mailing List, Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00057.html - Mailing List, Third Party Advisory | |
References | (BUGTRAQ) http://www.securityfocus.com/archive/1/539611/100/0/threaded - Third Party Advisory, VDB Entry | |
References | (BUGTRAQ) http://www.securityfocus.com/archive/1/archive/1/539611/100/0/threaded - Third Party Advisory, VDB Entry | |
References | (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NWMDLBWMGZKFHMRJ7QUQVCERP5QHDB6W/ - Mailing List, Third Party Advisory | |
References | (CONFIRM) http://fortiguard.com/advisory/FG-IR-16-063 - Third Party Advisory | |
References | (MLIST) http://www.openwall.com/lists/oss-security/2016/11/03/7 - Mailing List, Third Party Advisory | |
References | (MISC) http://packetstormsecurity.com/files/142151/Kernel-Live-Patch-Security-Notice-LSN-0021-1.html - Third Party Advisory, VDB Entry | |
References | (FEDORA) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E7M62SRP6CZLJ4ZXCRZKV4WPLQBSR7DT/ - Mailing List, Third Party Advisory | |
References | (MLIST) http://www.openwall.com/lists/oss-security/2022/08/15/1 - Mailing List, Third Party Advisory | |
References | (BUGTRAQ) http://www.securityfocus.com/archive/1/540252/100/0/threaded - Third Party Advisory, VDB Entry | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00045.html - Mailing List, Third Party Advisory | |
References | (CONFIRM) https://security.paloaltonetworks.com/CVE-2016-5195 - Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html - Mailing List, Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00033.html - Mailing List, Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00034.html - Mailing List, Third Party Advisory | |
References | (CONFIRM) https://kc.mcafee.com/corporate/index?page=content&id=SB10177 - Third Party Advisory | |
References | (UBUNTU) http://www.ubuntu.com/usn/USN-3107-2 - Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00058.html - Mailing List, Third Party Advisory | |
References | (CISCO) http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-linux - Third Party Advisory | |
References | (MLIST) http://www.openwall.com/lists/oss-security/2022/08/08/1 - Mailing List, Third Party Advisory | |
References | (MISC) http://packetstormsecurity.com/files/139287/DirtyCow-Local-Root-Proof-Of-Concept.html - Third Party Advisory, VDB Entry | |
References | (BUGTRAQ) http://www.securityfocus.com/archive/1/540736/100/0/threaded - Third Party Advisory, VDB Entry | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html - Mailing List, Third Party Advisory | |
References | (MLIST) http://www.openwall.com/lists/oss-security/2016/10/21/1 - Mailing List, Third Party Advisory | |
References | (UBUNTU) http://www.ubuntu.com/usn/USN-3106-3 - Third Party Advisory | |
References | (MLIST) http://www.openwall.com/lists/oss-security/2016/10/27/13 - Mailing List, Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00049.html - Mailing List, Third Party Advisory | |
References | (MLIST) http://www.openwall.com/lists/oss-security/2022/08/09/4 - Mailing List, Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00036.html - Mailing List, Third Party Advisory | |
References | (SUSE) http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00066.html - Mailing List, Third Party Advisory |
15 Aug 2022, 12:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
10 Aug 2022, 20:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
09 Aug 2022, 00:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
08 Aug 2022, 18:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
08 Aug 2022, 12:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
10 Mar 2022, 17:41
Type | Values Removed | Values Added |
---|---|---|
References |
|
17 Nov 2021, 22:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
10 Nov 2021, 01:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
08 Nov 2021, 12:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
Information
Published : 2016-11-10 21:59
Updated : 2023-12-10 12:01
NVD link : CVE-2016-5195
Mitre link : CVE-2016-5195
CVE.ORG link : CVE-2016-5195
JSON object : View
Products Affected
redhat
- enterprise_linux_aus
- enterprise_linux
- enterprise_linux_long_life
- enterprise_linux_eus
- enterprise_linux_tus
linux
- linux_kernel
debian
- debian_linux
canonical
- ubuntu_linux
CWE
CWE-362
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')