The Patching Friars' AlmanacA calendar of CVE saints

Patron of October 20

Dirty COWHoly card for dirty-cow: official logo by Dirty COW project (CC0 1.0), frame generated with AI (Claude, Anthropic).CC BY-NC-SA 4.0; logo CC0 1.0 Dirty COW VACCA SCRIBIT
Official logo by Dirty COW project (CC0 1.0) · 🤖 frame and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint Dirty COW, Sacred Cow of the Race Condition

Patron of Linux kernels in every phone and server, copy-on-write, and race conditions won by a hair.

Life

On 20 October 2016 Phil Oester reported a race condition in the Linux kernel's copy-on-write mechanism: with the right timing an ordinary user could write to read-only memory pages and become root. The bug had lived in the kernel since 2007 and was everywhere, from servers to Android phones. It was so reliable that it was used in real attacks at once.

Prayer

O Saint Dirty COW, cow that writes where it is forbidden, let our read-only pages stay read-only. Amen.

How to celebrate

Celebrated by updating the kernel past 4.8.3 and admiring the cow sticker that many still remember.

A dirty cow writes where it must not.

Technical record

Disclosed on
October 20 2016
CVE
CVE-2016-5195
CVSS
7.0Actively exploited (CISA KEV)
Product
Linux · Kernel

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."

Sources: dirtycow.ninja

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.