{"id":"OSV-2025-538","aliases":[],"status":"published","title":"Heap-double-free in policydb_destroy","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=430091583\n\n```\nCrash type: Heap-double-free\nCrash state:\npolicydb_destroy\ncheckpolicy-fuzzer.c\ndefine_genfs_context\n```","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2025-07-09T00:05:37.052433Z","modified":"2025-12-20T14:25:26Z","affected":[{"source":"osv","ecosystem":"OSS-Fuzz","package":"selinux","ranges":[{"type":"GIT","events":[{"introduced":"63388efcf491309782046a28a93bffce88f2f560"},{"fixed":"0ab542a4458f28530e0e9380a903f5c3aa9b1526"}]}],"versions":["3.9","3.9-rc1","3.9-rc2","3.9-rc3","checkpolicy-3.9","checkpolicy-3.9-rc1","checkpolicy-3.9-rc2","checkpolicy-3.9-rc3","libselinux-3.9","libselinux-3.9-rc1","libselinux-3.9-rc2","libselinux-3.9-rc3","libsemanage-3.9","libsemanage-3.9-rc1","libsemanage-3.9-rc2","libsemanage-3.9-rc3","libsepol-3.9","libsepol-3.9-rc1","libsepol-3.9-rc2","libsepol-3.9-rc3","mcstrans-3.9","mcstrans-3.9-rc1","mcstrans-3.9-rc2","mcstrans-3.9-rc3","policycoreutils-3.9","policycoreutils-3.9-rc1","policycoreutils-3.9-rc2","policycoreutils-3.9-rc3","restorecond-3.9","restorecond-3.9-rc1","restorecond-3.9-rc2","restorecond-3.9-rc3","secilc-3.9","secilc-3.9-rc1","secilc-3.9-rc2","secilc-3.9-rc3","selinux-dbus-3.9","selinux-dbus-3.9-rc1","selinux-dbus-3.9-rc2","selinux-dbus-3.9-rc3","selinux-gui-3.9","selinux-gui-3.9-rc1","selinux-gui-3.9-rc2","selinux-gui-3.9-rc3","selinux-python-3.9","selinux-python-3.9-rc1","selinux-python-3.9-rc2","selinux-python-3.9-rc3","selinux-sandbox-3.9","selinux-sandbox-3.9-rc1","selinux-sandbox-3.9-rc2","selinux-sandbox-3.9-rc3","semodule-utils-3.9","semodule-utils-3.9-rc1","semodule-utils-3.9-rc2","semodule-utils-3.9-rc3"]}],"references":[{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=430091583","tags":["report"]}],"sources":{"osv":[{"id":"OSV-2025-538","title":"Heap-double-free in policydb_destroy","description":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=430091583\n\n```\nCrash type: Heap-double-free\nCrash state:\npolicydb_destroy\ncheckpolicy-fuzzer.c\ndefine_genfs_context\n```\n","status":"published","published":"2025-07-09T00:05:37.052433Z","modified":"2025-12-20T14:25:26.67483Z","updated_at":"2026-11-02T15:52:49.981578Z"}]}}