Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 9

Export CSV
CVE-2021-36087

libsepol: heap-based buffer overflow in ebitmap_match_any()

The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check_neverallow). This occurs because there is sometimes a lack of checks for invalid statements in an optional block.

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Redhat Selinux Project
Products
Fedora Enterprise Linux Selinux
CVE-2026-59677

Process Kill Attack Vector in killall() in seunshare

A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context This issue affects policycoreutils through 3.10.

CVSS 4.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Selinux Project
Products
Selinux
CVE-2026-59676

Local File Deletion Attack Vector in rm_rf() in seunshare

A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in seunshare of selinux policycoreutils allows a user calling seunshare that is running in the unconfined SELinux domain to delete arbitrary root-owned files, This issue affects policycoreutils through 3.10.

CVSS 4.0 · 5.8 Medium EPSS < 1% KEV · Not listed
Vendors
Selinux Project
Products
Selinux
CVE-2015-3170

selinux-policy: policy package update causes denial of service

selinux-policy when sysctl fs.protected_hardlinks are set to 0 allows local users to cause a denial of service (SSH login prevention) by creating a hardlink to /etc/passwd from a directory named .config, and updating selinux-policy.

CVSS 3.0 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Selinux Project
Products
Selinux
CVE-2018-1063

policycoreutils: Relabelling of symbolic links in /tmp and /var/tmp change the context of their target instead

Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context of an arbitrary file to a context with few restrictions. This only happens when the relabeling process is done, usually when taking SELinux state from disabled to enable (permissive or enforcing). The issue was found in policycoreutils 2.5-11.

CVSS 3.0 · 4.4 Medium EPSS < 1% KEV · Not listed
Vendors
Redhat Selinux Project
Products
Enterprise Linux Selinux