Race Condition Affecting perf package, versions <0:2.6.32-642.6.2.el6


Severity

Recommended
0.0
high
0
10

Based on Red Hat Enterprise Linux security rating.

Threat Intelligence

Exploit Maturity
Mature
EPSS
81.66% (99th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-RHEL6-PERF-1507800
  • published26 Jul 2021
  • disclosed19 Oct 2016

Introduced: 19 Oct 2016

CVE-2016-5195  (opens in a new tab)
CWE-362  (opens in a new tab)

How to fix?

Upgrade RHEL:6 perf to version 0:2.6.32-642.6.2.el6 or higher.
This issue was patched in RHSA-2016:2105.

NVD Description

Note: Versions mentioned in the description apply only to the upstream perf package and not the perf package as distributed by RHEL. See How to fix? for RHEL:6 relevant fixed versions and status.

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."

References

CVSS Scores

version 3.1