CVE:CVE-2016-5195
CNNVD:CNNVD-201610-665
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 2.x至4.8.3之前的4.x版本中的mm/gup.c文件存在竞争条件问题漏洞，该漏洞源于程序没有正确处理copy-on-write(COW)功能写入只读内存映射。本地攻击者可利用该漏洞获取权限。
solution:Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,16.04,16.10,and avoid the version 12.04,14.04,16.04,16.10; Upgrade linux linux_kernel to a higher version than 3.2.83,3.4.113,3.10.104,3.12.66,3.16.38,3.18.44,4.1.35,4.4.26,4.7.9,4.8.3,and avoid the version [2.6.22,3.2.83),[3.3,3.4.113),[3.5,3.10.104),[3.11,3.12.66),[3.13,3.16.38),[3.17,3.18.44),[3.19,4.1.35),[4.2,4.4.26),[4.5,4.7.9),[4.8,4.8.3); Upgrade redhat enterprise_linux to a higher version than 5,6.0,7.0,and avoid the version 5,6.0,7.0; Upgrade redhat enterprise_linux_aus to a higher version than 6.2,6.4,6.5,and avoid the version 6.2,6.4,6.5; Upgrade redhat enterprise_linux_eus to a higher version than 6.6,6.7,7.1,and avoid the version 6.6,6.7,7.1; Upgrade redhat enterprise_linux_long_life to a higher version than 5.6,5.9,and avoid the version 5.6,5.9; Upgrade redhat enterprise_linux_tus to a higher version than 6.5,and avoid the version 6.5; Upgrade debian debian_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0