EXPOSURES › CVE-2016-5195
CVE-2016-5195
HIGH ⌖ ON CISA KEV · EXPLOITEDA local privilege escalation vulnerability in the Linux kernel was actively exploited in the wild, allowing attackers to escalate privileges on unpatched systems.
This CVE-2016-5195 race condition in the Linux kernel allowed local users to escalate privileges, and it was listed in CISA's KEV catalog indicating active exploitation. DIB organizations must ensure their Linux systems are patched against known vulnerabilities, especially those in the KEV catalog, to prevent privilege escalation and potential lateral movement. The failure highlights the critical need for timely patch management and monitoring of KEV entries.
Shame score — The vulnerability was actively exploited in the wild and included in CISA's KEV catalog, indicating a significant failure in patch management and system hardening that could lead to privilege escalation and further compromise.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Race condition in mm/gup.c in the Linux kernel allows local users to escalate privileges.
"Race condition in mm/gup.c in the Linux kernel allows local users to escalate privileges."
"Organizations Warned of 3 Exploited Linux Kernel Vulnerabilities"
"CVE, short for Common Vulnerabilities and Exposures, is a list of publicly disclosed computer security flaws."
"CISA Known Exploited Vulnerabilities (KEV) catalog is the authoritative list of security flaws that have been confirmed exploited in real-world attacks."
"Every published CVE since 1999, ranked by real-world exploitation — with public exploit code and copy-paste tests where they exist."
"Mirror of cisa.gov/kev data files"