Vulnerability Details CVE-2021-36086
The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set and cil_reset_classperms_list).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 7.0%
CVSS Severity
CVSS v3 Score 3.3
CVSS v2 Score 2.1
References
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32177
- https://github.com/SELinuxProject/selinux/commit/c49a8ea09501ad66e799ea41b8154b6770fec2c8
- https://github.com/google/oss-fuzz-vulns/blob/main/vulns/selinux/OSV-2021-536.yaml
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32177
- https://github.com/SELinuxProject/selinux/commit/c49a8ea09501ad66e799ea41b8154b6770fec2c8
- https://github.com/google/oss-fuzz-vulns/blob/main/vulns/selinux/OSV-2021-536.yaml
- https://lists.debian.org/debian-lts-announce/2024/10/msg00021.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/
- https://security.netapp.com/advisory/ntap-20250207-0004/
Products affected by CVE-2021-36086
-
cpe:2.3:a:netapp:active_iq_unified_manager:-
-
cpe:2.3:a:selinux_project:selinux:-
-
cpe:2.3:a:selinux_project:selinux:2.2
-
cpe:2.3:a:selinux_project:selinux:2.2.1
-
cpe:2.3:a:selinux_project:selinux:2.2.2
-
cpe:2.3:a:selinux_project:selinux:2.3
-
cpe:2.3:a:selinux_project:selinux:2.4
-
cpe:2.3:a:selinux_project:selinux:2.5
-
cpe:2.3:a:selinux_project:selinux:2.6
-
cpe:2.3:a:selinux_project:selinux:2.7
-
cpe:2.3:a:selinux_project:selinux:2.8
-
cpe:2.3:a:selinux_project:selinux:3.0
-
cpe:2.3:a:selinux_project:selinux:3.1
-
cpe:2.3:a:selinux_project:selinux:3.2
-
cpe:2.3:h:netapp:h610c:-
-
cpe:2.3:h:netapp:h610s:-
-
cpe:2.3:h:netapp:h615c:-
-
cpe:2.3:h:netapp:hci_compute_node:-
-
cpe:2.3:o:debian:debian_linux:11.0
-
cpe:2.3:o:fedoraproject:fedora:35
-
cpe:2.3:o:netapp:bootstrap_os:-
-
cpe:2.3:o:netapp:h610c_firmware:-
-
cpe:2.3:o:netapp:h610s_firmware:-
-
cpe:2.3:o:netapp:h615c_firmware:-