CVE-2021-36086

The CIL compiler in SELinux 3.2 has a use-after-free in cilresetclasspermission called from cilresetclasspermsset and cilresetclasspermslist...

CVE-2021-36086

The CIL compiler in SELinux 3.2 has a use-after-free in cilresetclasspermission called from cilresetclasspermsset and cilresetclasspermslist...

CVE-2021-36085

The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from verifymappermclassperms and hashtabmap...

CVE-2021-36085

The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from verifymappermclassperms and hashtabmap...

CVE-2021-36084

The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from cilverifyclasspermission and cilpreverifyhelper...

CVE-2021-36084

CVE-2021-36084 pertains to libsepol in SELinux 3.2, where the CIL compiler has a use-after-free in __cil_verify_classperms (and related paths) and a heap-based buffer over-read (CVE-2021-36087). Several connected advisories confirm affected product libsepol and provide fixes: Debian LTS DLA-3930-...

CVE-2021-36084: Use After Free

The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from cilverifyclasspermission and cilpreverifyhelper...

CVE-2021-36086: Use After Free

The CIL compiler in SELinux 3.2 has a use-after-free in cilresetclasspermission called from cilresetclasspermsset and cilresetclasspermslist...

CVE-2021-36085: Use After Free

The CIL compiler in SELinux 3.2 has a use-after-free in cilverifyclassperms called from verifymappermclassperms and hashtabmap...

CVE-2021-36087: Out-of-bounds Read

The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmapmatchany called indirectly from cilcheckneverallow. This occurs because there is sometimes a lack of checks for invalid statements in an optional block...

SELinux 资源管理错误漏洞

SELinux is a Linux subsystem from the National Security Agency that uses a secure architecture that allows administrators to better control who has access to the system. SELinux suffers from a security vulnerability that stems from the CIL compiler in SELinux 3.2 having a use-after-free in...

PT-2021-3582

Name of the Vulnerable Software and Affected Versions SELinux version 3.2 Description The issue is related to a use-after-free in the cil reset classpermission function of the CIL compiler in SELinux. This function is called from cil reset classperms set and cil reset classperms list. The...

[SECURITY] Fedora 25 Update: secilc-2.5-6.fc25

The SELinux CIL Compiler is a compiler that converts the CIL language as described on the CIL design wiki into a kernel binary policy file. Please see the CIL Design Wiki at: http://github.com/SELinuxProject/cil/wiki/ for more information about the goals and features on the CIL language...