CVE-2016-5195— Linux kernel 竞争条件问题漏洞
一分钟漏洞结论
影响对象
n/a n/a
利用判断
已确认在野利用，应立即处置
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 2.x至4.8.3之前的4.x版本中的mm/gup.c文件存在竞争条件问题漏洞，该漏洞源于程序没有正确处理copy-on-write(COW)功能写入只读内存映射。本地攻击者可利用该漏洞获取权限。
公开利用映射 5
已观察到在野利用
cisa_kev · confirmed
可能的 ATT&CK 技术 1 AI
T1548 · Abuse Elevation Control Mechanism
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2016-5195 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
来源: CVE Program / CVE List V5
Vulnerability Description
Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 竞争条件问题漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 2.x至4.8.3之前的4.x版本中的mm/gup.c文件存在竞争条件问题漏洞，该漏洞源于程序没有正确处理copy-on-write(COW)功能写入只读内存映射。本地攻击者可利用该漏洞获取权限。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
二、漏洞 CVE-2016-5195 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|---|---|---|
| 1 | Dirty Cow | https://github.com/KosukeShimofuji/CVE-2016-5195 | POC详情 |
| 2 | None | https://github.com/ASRTeam/CVE-2016-5195 | POC详情 |
| 3 | CVE-2016-5195 (dirtycow/dirtyc0w) proof of concept for Android | https://github.com/timwr/CVE-2016-5195 | POC详情 |
| 4 | CVE-2016-5195 exploit written in Crystal | https://github.com/xlucas/dirtycow.cr | POC详情 |
| 5 | Ansible playbook to mitigate CVE-2016-5195 on CentOS | https://github.com/istenrot/centos-dirty-cow-ansible | POC详情 |
| 6 | Mitigates CVE-2016-5195 aka DirtyCOW | https://github.com/pgporada/ansible-role-cve | POC详情 |
| 7 | Dirty COW (CVE-2016-5195) vulnerability testing utility for Linux-based systems. | https://github.com/sideeffect42/DirtyCOWTester | POC详情 |
| 8 | PoC for Dirty COW (CVE-2016-5195) | https://github.com/scumjr/dirtycow-vdso | POC详情 |
| 9 | A CVE-2016-5195 exploit example. | https://github.com/gbonacini/CVE-2016-5195 | POC详情 |
| 10 | Universal Android root tool based on CVE-2016-5195. Watch this space. | https://github.com/DavidBuchanan314/cowroot | POC详情 |
| 11 | Scan vuls kernel CVE-2016-5195 - DirtyCow | https://github.com/aishee/scan-dirtycow | POC详情 |
| 12 | None | https://github.com/oleg-fiksel/ansible_CVE-2016-5195_check | POC详情 |
| 13 | Recent Linux privilege escalation exploit | https://github.com/ldenevi/CVE-2016-5195 | POC详情 |
| 14 | 这里保留着部分脏牛漏洞的利用代码 | https://github.com/whu-enjoy/CVE-2016-5195 | POC详情 |
| 15 | Dirty Cow exploit - CVE-2016-5195 | https://github.com/firefart/dirtycow | POC详情 |
| 16 | Inspec profile for detecting CVE-2016-5195 aka Dirty COW | https://github.com/ndobson/inspec_CVE-2016-5195 | POC详情 |
| 17 | None | https://github.com/linhlt247/DirtyCOW_CVE-2016-5195 | POC详情 |
| 18 | None | https://github.com/sribaba/android-CVE-2016-5195 | POC详情 |
| 19 | Android APK Based On Public Information Using DirtyCOW CVE-2016-5195 Exploit | https://github.com/esc0rtd3w/org.cowpoop.moooooo | POC详情 |
| 20 | CVE-2016-5195 (Dirty COW) PoC for Android 6.0.1 Marshmallow | https://github.com/hyln9/VIKIROOT | POC详情 |
| 21 | CVE-2016-5195 dirtycow by timwr automated multi file patch tool | https://github.com/droidvoider/dirtycow-replacer | POC详情 |
| 22 | os experiment 4 CVE-2016-5195 | https://github.com/FloridSleeves/os-experiment-4 | POC详情 |
| 23 | Ready to use, weaponized dirtycow (CVE-2016-5195) | https://github.com/arbll/dirtycow | POC详情 |
| 24 | Dirty COW (CVE-2016-5195) Testing | https://github.com/titanhp/Dirty-COW-CVE-2016-5195-Testing | POC详情 |
| 25 | None | https://github.com/acidburnmi/CVE-2016-5195-master | POC详情 |
| 26 | Example exploit for CVE-2016-5195 | https://github.com/xpcmdshell/derpyc0w | POC详情 |
| 27 | 编译好的脏牛漏洞（CVE-2016-5195）EXP | https://github.com/Brucetg/DirtyCow-EXP | POC详情 |
| 28 | Linux 本地提权漏洞 | https://github.com/jas502n/CVE-2016-5195 | POC详情 |
| 29 | 脏牛Linux本地提权漏洞复现(CVE-2016-5195) | https://github.com/imust6226/dirtcow | POC详情 |
| 30 | Exploit the dirtycow vulnerability to login as root | https://github.com/zakariamaaraki/Dirty-COW-CVE-2016-5195- | POC详情 |
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2016-5195 的情报信息
请登录查看更多情报信息。
CVE-2016-5195 补丁与修复 (2)
CVE-2016-5195 厂商安全公告 (54)
-
https://access.redhat.com/security/vulnerabilities/2706661 x_refsource_CONFIRM
-
https://security-tracker.debian.org/tracker/CVE-2016-5195 x_refsource_CONFIRM
-
https://bugzilla.suse.com/show_bug.cgi?id=1004418 x_refsource_CONFIRM
-
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10770 x_refsource_CONFIRM
-
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10774 x_refsource_CONFIRM
-
http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10807 x_refsource_CONFIRM
-
https://security.netapp.com/advisory/ntap-20161025-0001/ x_refsource_CONFIRM
-
https://source.android.com/security/bulletin/2016-11-01.html x_refsource_CONFIRM
-
http://fortiguard.com/advisory/FG-IR-16-063 x_refsource_CONFIRM
-
https://bugzilla.redhat.com/show_bug.cgi?id=1384344 x_refsource_CONFIRM
-
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html x_refsource_CONFIRM
-
-
https://source.android.com/security/bulletin/2016-12-01.html x_refsource_CONFIRM
-
https://access.redhat.com/security/cve/cve-2016-5195 x_refsource_CONFIRM
-
-
https://security.paloaltonetworks.com/CVE-2016-5195 x_refsource_CONFIRM
-
-
-
-
-
🔗 USN-3104-1: Linux kernel vulnerability | Ubuntu security notices | Ubuntu 查看完整文章 vendor-advisory x_refsource_UBUNTU
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-linux vendor-advisory x_refsource_CISCO
-
http://www.securityfocus.com/archive/1/archive/1/539611/100/0/threaded mailing-list x_refsource_BUGTRAQ
-
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-vcsd vendor-advisory x_refsource_CISCO
-
http://www.securityfocus.com/archive/1/archive/1/540344/100/0/threaded mailing-list x_refsource_BUGTRAQ
-
-
-
http://www.securityfocus.com/archive/1/archive/1/540252/100/0/threaded mailing-list x_refsource_BUGTRAQ
-
http://www.securityfocus.com/archive/1/archive/1/540736/100/0/threaded mailing-list x_refsource_BUGTRAQ
-
CVE-2016-5195 公开利用代码 (8)
CVE-2016-5195 邮件列表归档 (41)
-
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00056.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00067.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00065.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00052.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00053.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00100.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00038.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00057.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00049.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00036.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00051.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00064.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00045.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00040.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00055.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00050.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00054.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00058.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00066.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00039.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00072.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00035.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00034.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html vendor-advisory x_refsource_SUSE
-
http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00048.html vendor-advisory x_refsource_SUSE
-
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W3APRVDVPDBXLH4DC5UKZVCR742MJIM3/ vendor-advisory x_refsource_FEDORA
-
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E7M62SRP6CZLJ4ZXCRZKV4WPLQBSR7DT/ vendor-advisory x_refsource_FEDORA
-
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NWMDLBWMGZKFHMRJ7QUQVCERP5QHDB6W/ vendor-advisory x_refsource_FEDORA
-
-
-
-
-
-
-
-
-
-
-
-
CVE-2016-5195 其他参考 (18)
-
https://dirtycow.ninja x_refsource_MISC
-
http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.3 x_refsource_CONFIRM
-
https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-5195.html x_refsource_CONFIRM
-
https://kc.mcafee.com/corporate/index?page=content&id=SB10222 x_refsource_CONFIRM
-
https://github.com/dirtycow/dirtycow.github.io/wiki/PoCs x_refsource_MISC
-
https://kc.mcafee.com/corporate/index?page=content&id=SB10176 x_refsource_CONFIRM
-
https://kc.mcafee.com/corporate/index?page=content&id=SB10177 x_refsource_CONFIRM
-
https://bto.bluecoat.com/security-advisory/sa134 x_refsource_CONFIRM
同批安全公告 · n/a · 2016-11-10 · 共 72 条
| CVE-2016-7231 | Microsoft Office 内存损坏漏洞 | |
| CVE-2016-7252 | Microsoft SQL 分析服务信息泄露漏洞 | |
| CVE-2016-7250 | Microsoft SQL RDBMS 引擎特权提升漏洞 | |
| CVE-2016-7238 | Microsoft Windows NTLM 特权提升漏洞 | |
| CVE-2016-7237 | Microsoft Windows 本地安全认证子系统服务拒绝服务漏洞 | |
| CVE-2016-7236 | Microsoft Office 内存损坏漏洞 | |
| CVE-2016-7235 | Microsoft Office 内存损坏漏洞 | |
| CVE-2016-7234 | Microsoft Office 内存损坏漏洞 | |
| CVE-2016-7233 | Microsoft Office 信息泄露漏洞 | |
| CVE-2016-7232 | Microsoft Office 内存损坏漏洞 | |
| CVE-2016-7239 | Microsoft 浏览器信息泄露漏洞 | |
| CVE-2016-7230 | Microsoft Office 内存损坏漏洞 | |
| CVE-2016-7229 | Microsoft Office 内存损坏漏洞 | |
| CVE-2016-7228 | Microsoft Office 内存损坏漏洞 | |
| CVE-2016-7227 | Microsoft 浏览器信息泄漏漏洞 | |
| CVE-2016-7226 | Microsoft Windows VHD 驱动程序特权提升漏洞 | |
| CVE-2016-7225 | Microsoft Windows VHD 驱动程序特权提升漏洞 | |
| CVE-2016-7224 | Microsoft Windows VHD 驱动程序特权提升漏洞 | |
| CVE-2016-7223 | Microsoft Windows VHD 驱动程序特权提升漏洞 | |
| CVE-2016-7222 | Microsoft Windows 任务调度器特权提升漏洞 |
显示前 20 条，共 72 条。 查看全部 → →
IV. Related Vulnerabilities
V. Comments for CVE-2016-5195
匿名用户
2026-04-23 11:30:53Hello friends! I came across a 169 valuable website that I think you should visit. This tool is packed with a lot of useful information that you might find valuable. It has everything you could possibly need, so be sure to give it a visit! <a href=https://www.bumppy.com/the-interplay-of-business-and-technology-transforming-industries-and-driving-innovation/>https://www.bumppy.com/the-interplay-of-business-and-technology-transforming-industries-and-driving-innovation/</a> Additionally remember not to forget, folks, which you constantly are able to in the article find responses for the most the very complicated queries. We made an effort to explain all of the information using an extremely understandable way.
匿名用户
2026-07-18 21:29:00Hello colleagues Good evening. A 49 perfect site 1 that I found on the Internet. Check out this site. There's a great article there. <a href=https://ventsabout.com/how-to-play-at-22bets-online-sports-betting-site/>https://www.chivmen.com/what-are-fixed-and-proportional-bets-and-what-is-spread-betting/</a>| There is sure to be a lot of useful and interesting information for you here. You'll find everything you need and more. Feel free to follow the link below.