What happened
Race condition in mm/gup.c in the Linux kernel allows local users to escalate privileges.
Affected versions
Kernel: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
Exploit-DB 40616Linux Kernel 2.6.22 < 3.9 (x86/x64) - 'Dirty COW /proc/self/mem' Race Condition Privilege Escalation (SUID Method)Robin Verton2016-10-21VerifiedExploit-DB 40847Linux Kernel 2.6.22 < 3.9 - 'Dirty COW /proc/self/mem' Race Condition Privilege Escalation (/etc/passwd Method)Gabriele Bonacini2016-11-27VerifiedExploit-DB 40838Linux Kernel 2.6.22 < 3.9 - 'Dirty COW PTRACE_POKEDATA' Race Condition (Write Access Method)Phil Oester2016-10-26VerifiedExploit-DB 40839Linux Kernel 2.6.22 < 3.9 - 'Dirty COW' 'PTRACE_POKEDATA' Race Condition Privilege Escalation (/etc/passwd Method)FireFart2016-11-28VerifiedExploit-DB 40611Linux Kernel 2.6.22 < 3.9 - 'Dirty COW' /proc/self/mem Race Condition (Write Access Method)Phil Oester2016-10-19VerifiedPoC-in-GitHub · ASRTeam/CVE-2016-5195★ 1ASRTeam2016-10-21CandidatePoC-in-GitHub · timwr/CVE-2016-5195CVE-2016-5195 (dirtycow/dirtyc0w) proof of concept for Android★ 1010timwr2016-10-21CandidatePoC-in-GitHub · xlucas/dirtycow.crCVE-2016-5195 exploit written in Crystal★ 13xlucas2016-10-21CandidatePoC-in-GitHub · istenrot/centos-dirty-cow-ansibleAnsible playbook to mitigate CVE-2016-5195 on CentOS★ 0istenrot2016-10-21CandidatePoC-in-GitHub · pgporada/ansible-role-cveMitigates CVE-2016-5195 aka DirtyCOW★ 10pgporada2016-10-22CandidatePoC-in-GitHub · sideeffect42/DirtyCOWTesterDirty COW (CVE-2016-5195) vulnerability testing utility for Linux-based systems.★ 7sideeffect422016-10-22CandidatePoC-in-GitHub · scumjr/dirtycow-vdsoPoC for Dirty COW (CVE-2016-5195)★ 513scumjr2016-10-22CandidatePoC-in-GitHub · gbonacini/CVE-2016-5195A CVE-2016-5195 exploit example.★ 341gbonacini2016-10-23CandidatePoC-in-GitHub · DavidBuchanan314/cowrootUniversal Android root tool based on CVE-2016-5195. Watch this space.★ 32DavidBuchanan3142016-10-24CandidatePoC-in-GitHub · aishee/scan-dirtycowScan vuls kernel CVE-2016-5195 - DirtyCow★ 16aishee2016-10-29CandidatePoC-in-GitHub · oleg-fiksel/ansible_CVE-2016-5195_check★ 6oleg-fiksel2016-10-29CandidatePoC-in-GitHub · ldenevi/CVE-2016-5195Recent Linux privilege escalation exploit★ 0ldenevi2016-11-06CandidatePoC-in-GitHub · whu-enjoy/CVE-2016-5195这里保留着部分脏牛漏洞的利用代码★ 10whu-enjoy2016-11-17CandidatePoC-in-GitHub · firefart/dirtycowDirty Cow exploit - CVE-2016-5195★ 935firefart2016-11-25CandidatePoC-in-GitHub · ndobson/inspec_CVE-2016-5195Inspec profile for detecting CVE-2016-5195 aka Dirty COW★ 0ndobson2016-12-08CandidatePoC-in-GitHub · sribaba/android-CVE-2016-5195★ 0sribaba2017-01-15CandidatePoC-in-GitHub · esc0rtd3w/org.cowpoop.mooooooAndroid APK Based On Public Information Using DirtyCOW CVE-2016-5195 Exploit★ 3esc0rtd3w2017-01-16CandidatePoC-in-GitHub · hyln9/VIKIROOTCVE-2016-5195 (Dirty COW) PoC for Android 6.0.1 Marshmallow★ 271hyln92017-01-20CandidatePoC-in-GitHub · droidvoider/dirtycow-replacerCVE-2016-5195 dirtycow by timwr automated multi file patch tool★ 4droidvoider2017-03-18CandidatePoC-in-GitHub · FloridSleeves/os-experiment-4os experiment 4 CVE-2016-5195★ 2FloridSleeves2017-06-16CandidatePoC-in-GitHub · arbll/dirtycowReady to use, weaponized dirtycow (CVE-2016-5195)★ 1arbll2017-10-11CandidatePoC-in-GitHub · titanhp/Dirty-COW-CVE-2016-5195-TestingDirty COW (CVE-2016-5195) Testing★ 1titanhp2017-10-19CandidatePoC-in-GitHub · acidburnmi/CVE-2016-5195-master★ 0acidburnmi2017-12-06CandidatePoC-in-GitHub · xpcmdshell/derpyc0wExample exploit for CVE-2016-5195★ 0xpcmdshell2018-04-11CandidatePoC-in-GitHub · Brucetg/DirtyCow-EXP编译好的脏牛漏洞（CVE-2016-5195）EXP★ 141Brucetg2018-05-27CandidatePoC-in-GitHub · jas502n/CVE-2016-5195Linux 本地提权漏洞★ 7jas502n2019-08-13CandidatePoC-in-GitHub · imust6226/dirtcow脏牛Linux本地提权漏洞复现(CVE-2016-5195)★ 9imust62262019-10-22CandidatePoC-in-GitHub · zakariamaaraki/Dirty-COW-CVE-2016-5195-Exploit the dirtycow vulnerability to login as root★ 0zakariamaaraki2019-11-26CandidatePoC-in-GitHub · shanuka-ashen/Dirty-Cow-Explanation-CVE-2016-5195-★ 0shanuka-ashen2020-05-11CandidatePoC-in-GitHub · dulanjaya23/Dirty-Cow-CVE-2016-5195-This is a Dirty Cow (CVE-2016-5195) privilege escalation vulnerability exploit★ 0dulanjaya232020-05-12CandidatePoC-in-GitHub · KaviDk/dirtyCowDirtycow also is known as CVE-2016-5195★ 0KaviDk2020-05-12CandidatePoC-in-GitHub · DanielEbert/CVE-2016-5195DirtyCOW Exploit for Android★ 2DanielEbert2020-12-20CandidatePoC-in-GitHub · arttnba3/CVE-2016-5195my personal POC of CVE-2016-5195(dirtyCOW)★ 3arttnba32021-04-16CandidatePoC-in-GitHub · talsim/root-dirtyc0wDirtyCow root privilege escalation (CVE-2016-5195)★ 5talsim2021-10-06CandidatePoC-in-GitHub · KasunPriyashan/Y2S1-Project-Linux-Exploitaion-using-CVE-2016-5195-Vulnerability★ 0KasunPriyashan2022-01-17CandidatePoC-in-GitHub · th3-5had0w/DirtyCOW-PoCAn exploit script of CVE-2016-5195★ 1th3-5had0w2022-02-17CandidatePoC-in-GitHub · r1is/CVE-2022-0847CVE-2022-0847-DirtyPipe-Exploit CVE-2022-0847 是存在于 Linux内核 5.8 及之后版本中的本地提权漏洞。攻击者通过利用此漏洞，可覆盖重写任意可读文件中的数据，从而可将普通权限的用户提升到特权 root。 CVE-2022-0847 的漏洞原理类似于 CVE-2016-5195 脏牛漏洞（Dirty Cow），但它更容易被利用。漏洞作者将此漏洞命名为“Dirty Pipe”★ 282r1is2022-03-07CandidatePoC-in-GitHub · TotallyNotAHaxxer/CVE-2016-5195Ported golang version of dirtycow.c★ 1TotallyNotAHaxxer2022-04-08CandidatePoC-in-GitHub · passionchenjianyegmail8/scumjrsPoC for Dirty COW (CVE-2016-5195)★ 0passionchenjianyegmail82022-04-26CandidatePoC-in-GitHub · malinthag62/The-exploitation-of-Dirty-Cow-CVE-2016-5195The Repository contains documents that explains the explotation of CVE-2016-5195★ 1malinthag622022-05-18CandidatePoC-in-GitHub · fei9747/CVE-2016-5195★ 0fei97472022-11-29CandidatePoC-in-GitHub · LinuxKernelContent/DirtyCowBelow code takes advantage of a known vulnerability [Dirty COW (CVE-2016-5195)] 🔥★ 3LinuxKernelContent2023-02-08CandidatePoC-in-GitHub · h1n4mx0z/Research-CVE-2016-5195★ 0h1n4mx0z2023-10-26CandidatePoC-in-GitHub · EDLLT/CVE-2016-5195-master★ 0EDLLT2023-11-29CandidatePoC-in-GitHub · ZhiQiAnSecFork/DirtyCOW_CVE-2016-5195★ 0ZhiQiAnSecFork2023-12-15CandidatePoC-in-GitHub · sakilahamed/Linux-Kernel-Exploit-LABMore specific : Dirty COW (CVE-2016-5195)★ 0sakilahamed2024-03-30CandidatePoC-in-GitHub · ASUKA39/CVE-2016-5195DirtyCOW 笔记★ 0ASUKA392024-04-05CandidatePoC-in-GitHub · LiEnby/PSSRootOne-Click-Root program based on CVE-2016-5195, that works on the old 'PlayStation Certified' android devices★ 2LiEnby2025-03-15CandidatePoC-in-GitHub · 0x3n19m4/CVE-2016-5195CVE-2016-5195 linux kernel exploit★ 10x3n19m42025-05-02CandidatePoC-in-GitHub · Samuel-G3/Escalamiento-de-Privilegios-usando-el-Kernel-Exploit-Dirty-CowExploit para escalada de privilegios en Linux basado en la vulnerabilidad Dirty Cow (CVE-2016-5195). Incluye binario, código fuente e instrucciones para su uso en entornos controlados.★ 0Samuel-G32025-06-25CandidatePoC-in-GitHub · mohammadamin382/dirtycow-labEducational PoC for Dirty COW (CVE-2016-5195) with logging, ptrace fallback, and binary payload support.★ 0mohammadamin3822025-07-31CandidatePoC-in-GitHub · MarioAlejos-Cs/dirtycow-labExplotación vulnerabilidad Dirty COW (CVE-2016-5195) en Ubuntu 16.04.1.★ 0MarioAlejos-Cs2025-08-22CandidatePoC-in-GitHub · ramahmdr/dirtycowDirty Cow exploit - CVE-2016-5195★ 0ramahmdr2026-01-22CandidatePoC-in-GitHub · elhaddadalaa788-alt/kernel-exploit-dirtycow-project-submDirty COW Privilege Escalation (CVE-2016-5195)★ 0elhaddadalaa788-alt2026-02-01CandidatePoC-in-GitHub · theo543/OSDS_Paper_CVE-2016-5195★ 0theo5432026-02-06CandidatePoC-in-GitHub · maur0amaya/Escalamiento-de-Privilegios-usando-el-Kernel-Exploit-Dirty-CowEste proyecto tiene como objetivo demostrar de forma práctica el funcionamiento del exploit Dirty COW (CVE-2016-5195), una vulnerabilidad crítica del en el kernel de Linux. Se simula un escenario realista en el que un atacante con acceso local limitado a un sistema sin parchear logra escalar sus privilegios hasta obtener acceso completo como root.★ 0maur0amaya2026-05-15CandidatePoC-in-GitHub · rauljvc8/Exploit-Dirty-CowPrivilege escalation lab reproducing the DirtyCow kernel exploit (CVE-2016-5195) in a controlled environment. Includes vulnerable setup, exploit execution, privilege escalation to root, and mitigation analysis.★ 0rauljvc82026-05-16CandidatePoC-in-GitHub · GonzaBot/kernel-exploit-dirtycowLab — Privilege Escalation via Dirty Cow CVE-2016-5195 | 4Geeks Academy★ 0GonzaBot2026-06-25CandidatePoC-in-GitHub · gogooma125732/CVE-2016-5195Defensive analysis and non-weaponized validation of CVE-2016-5195 (Dirty COW), including root-cause research, patch analysis, and reproducible evidence.★ 0gogooma1257322026-06-27CandidatePoC-in-GitHub · voidgguy/lenovo-a1000g-mt8317-A412_01_09_130907-kernel-3.4.0-root-cve-2016-5195[AI-assisted] Root method for Lenovo IdeaTab A1000G (MT8317, kernel 3.4.0, Android 4.1) via CVE-2016-5195 (Dirty COW)★ 0voidgguy2026-07-11CandidatePoC-in-GitHub · Minime794/CVE-2016-5195Copy Fail CVE-2016-5195★ 0Minime7942026-08-22CandidatePoC-in-GitHub · KongQBin/CVE-2016-5195★ 0KongQBin2026-08-26CandidateSource timeline
Discovered through CISA Known Exploited VulnerabilitiesView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Added to CISA Known Exploited Vulnerabilities catalogView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.