Vulnerabilidades de Selinux Project
CVEs publicadas que afetam produtos de Selinux Project: 6 registro(s), com severidade, exploração e correções.
CVE-2026-59677
Média · 6.8
CWE-862 23/07/2026
Process Kill Attack Vector in killall() in seunshare
A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in
unconfined context
This issue affects policycoreutils through 3.10.
CVE-2026-59676
Média · 5.8
CWE-367 23/07/2026
Local File Deletion Attack Vector in rm_rf() in seunshare
A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in seunshare of selinux policycoreutils allows a user calling seunshare that is running in the unconfined SELinux domain to delete arbitrary root-owned files,
This issue affects policycoreutils through 3.10.
CVE-2021-36087
Baixa · 3.3
CWE-125 01/07/2021
The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called...
The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check_neverallow). This occurs because there is sometimes a lack of checks for invalid statements in an optional block.
CVE-2021-36086
Baixa · 3.3
CWE-416 01/07/2021
The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from...
The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set and cil_reset_classperms_list).
CVE-2021-36085
Baixa · 3.3
CWE-416 01/07/2021
The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from...
The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __verify_map_perm_classperms and hashtab_map).
CVE-2021-36084
Baixa · 3.3
CWE-416 01/07/2021
The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from...
The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper).