Every CVE Search/ Get API key

OSV-2021-536

Heap-use-after-free in cil_reset_classpermission

No scoreFix available

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32177

Crash type: Heap-use-after-free READ 8
Crash state:
cil_reset_classpermission
cil_reset_classperms_set
cil_reset_classperms_list

What each source reports

OSV No score

Heap-use-after-free in cil_reset_classpermission

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32177

Crash type: Heap-use-after-free READ 8
Crash state:
cil_reset_classpermission
cil_reset_classperms_set
cil_reset_classperms_list
Record
OSV-2021-536
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
selinux
OSS-Fuzz
Listed versions, plus commit ranges
3.23.2-rc3checkpolicy-3.2checkpolicy-3.2-rc3libselinux-3.2
Show 23 moreShow less
libselinux-3.2-rc3libsemanage-3.2libsemanage-3.2-rc3libsepol-3.2libsepol-3.2-rc3mcstrans-3.2mcstrans-3.2-rc3policycoreutils-3.2policycoreutils-3.2-rc3restorecond-3.2restorecond-3.2-rc3secilc-3.2secilc-3.2-rc3selinux-dbus-3.2selinux-dbus-3.2-rc3selinux-gui-3.2selinux-gui-3.2-rc3selinux-python-3.2selinux-python-3.2-rc3selinux-sandbox-3.2selinux-sandbox-3.2-rc3semodule-utils-3.2semodule-utils-3.2-rc3
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2021-536 is a vulnerability with no CVSS score yet in selinux, published March 19, 2021. No source lists public exploit code. A source reports a fix.

References

MoveEnter Open