Selinux Project vulnerabilities
Published CVEs affecting Selinux Project products: 6 record(s), with severity, exploitation and fixes.
CVE-2026-59677
Medium · 6.8
CWE-862 Jul 23, 2026
Process Kill Attack Vector in killall() in seunshare
A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in
unconfined context
This issue affects policycoreutils through 3.10.
CVE-2026-59676
Medium · 5.8
CWE-367 Jul 23, 2026
Local File Deletion Attack Vector in rm_rf() in seunshare
A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in seunshare of selinux policycoreutils allows a user calling seunshare that is running in the unconfined SELinux domain to delete arbitrary root-owned files,
This issue affects policycoreutils through 3.10.
CVE-2021-36087
Low · 3.3
CWE-125 Jul 1, 2021
The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called...
The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check_neverallow). This occurs because there is sometimes a lack of checks for invalid statements in an optional block.
CVE-2021-36086
Low · 3.3
CWE-416 Jul 1, 2021
The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from...
The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set and cil_reset_classperms_list).
CVE-2021-36085
Low · 3.3
CWE-416 Jul 1, 2021
The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from...
The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __verify_map_perm_classperms and hashtab_map).
CVE-2021-36084
Low · 3.3
CWE-416 Jul 1, 2021
The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from...
The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper).