CVE-2021-36086Low· 3.3▾ SunlitThe CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set and cil_reset_classperms_list).
▾ Sunlit zone — Low / medium · no exploitation signal
impact 18.2 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 14.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.6%
The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set and cil_reset_classperms_list).
debian_linux = 11.0active_iq_unified_managerbootstrap_osh610c_firmwareh610s_firmwareh615c_firmwareselinux < 3.3fedora = 35Upgrade past the affected range:
selinux 3.3Connected by shared product, vendor, weakness, or advisory.
CVE-2024-50602Medium· 5.9An issue was discovered in libexpat before 2.6.4
CVE-2021-36085Low· 3.3The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __verify_map_perm_classperms and hashtab_map).
CVE-2021-36084Low· 3.3The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper).
CVE-2023-5178High· 8.8A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux kernel
CVE-2022-3649Low· 3.1A vulnerability was found in Linux Kernel
CVE-2021-32292Critical· 9.8An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726