CVE-2016-5195

ENISA EUVD: EUVD-2016-6146 ↗

Exploited in the Wild ✓ Confirmed 0-Day ★ Google Project Zero

Triaged: March 3, 2026 9 articles Published: 2016-11-10

VulnLookup ↗ NVD ↗ EUVD ↗ MITRE ↗ Advisory ↗ P0 Sheet ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24

93.93%

probability

This CVE has a 93.93% probability of being exploited in the next 30 days.

0% Top 99.9th percentile of all CVEs 100%

CVSS v3.1

Source: VulnerabilityLookup (CIRCL)

7.0

HIGH

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

VulnerabilityLookup (CNA)

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."

Affected Products

n/a

Attack Intelligence

CWE-362 · Race Condition CWE-691

Google Project Zero

Patched

Oct. 18, 2016

Reported by

Phil Oester

Root Cause Analysis

???

Exploits & PoC

timwr/CVE-2016-5195

CVE-2016-5195 (dirtycow/dirtyc0w) proof of concept for Android

1003

firefart/dirtycow

Dirty Cow exploit - CVE-2016-5195

928

scumjr/dirtycow-vdso

PoC for Dirty COW (CVE-2016-5195)

510

gbonacini/CVE-2016-5195

A CVE-2016-5195 exploit example.

334

r1is/CVE-2022-0847

CVE-2022-0847-DirtyPipe-Exploit CVE-2022-0847 是存在于 Linux内核 5.8 及之后版本中的本地提权漏洞。攻击者通过利用此漏洞，可覆盖重写任意可读文件中的数据，从而可将普通权限的用户提升到特权 root。 CVE-2022-0847 的漏洞原

280

hyln9/VIKIROOT

CVE-2016-5195 (Dirty COW) PoC for Android 6.0.1 Marshmallow

272

DavidBuchanan314/cowroot

Universal Android root tool based on CVE-2016-5195. Watch this space.

aishee/scan-dirtycow

Scan vuls kernel CVE-2016-5195 - DirtyCow

8 repos — triés par ⭐ Rechercher sur GitHub ↗

http://rhn.redhat.com/errata/RHSA-2016-2107.html

vendor-advisory x_refsource_REDHAT

https://www.exploit-db.com/exploits/40616/

exploit x_refsource_EXPLOIT-DB

https://access.redhat.com/errata/RHSA-2017:0372

vendor-advisory x_refsource_REDHAT

https://bto.bluecoat.com/security-advisory/sa134

x_refsource_CONFIRM

https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05352241

x_refsource_CONFIRM

http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

x_refsource_CONFIRM

Signal Intelligence

Confidenceⓘ

95%

EPSS 93.93%

CVSS v3.1 7.0

Mentions 9

Last Seen May 14, 2026

CNA Information

CNA Assigner

Chrome

Analyst Note

Dirty COW (CVE-2016-5195) is a well-documented race condition in the Linux kernel's copy-on-write mechanism that was actively exploited in the wild in October 2016 and reported by Google Project Zero. The vulnerability has extensive public documentation, proof-of-concept exploits, and confirmed real-world exploitation, making it unquestionably a confirmed vulnerability.