CVE-2021-36086
Fixed in a distro release EPSS <1%
The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set and cil_reset_classperms_list).
Products: Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP, Siemens RUGGEDCOM ROX MX5000, Siemens RUGGEDCOM ROX MX5000RE, Siemens RUGGEDCOM ROX RX1400, Siemens RUGGEDCOM ROX RX1500, Siemens RUGGEDCOM ROX RX1501, Siemens RUGGEDCOM ROX RX1510, Siemens RUGGEDCOM ROX RX1511, Siemens RUGGEDCOM ROX RX1512, Siemens RUGGEDCOM ROX RX1524, Siemens RUGGEDCOM ROX RX1536, Siemens RUGGEDCOM ROX RX5000
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 8 | libsepol | 2.9-3.el8 |
| AlmaLinux 8 | libsepol-devel | 2.9-3.el8 |
| AlmaLinux 8 | libsepol-static | 2.9-3.el8 |
| Debian 11 | libsepol | 3.1-1+deb11u1 |
| Debian 12 | libsepol | 3.3-1 |
| Debian 13 | libsepol | 3.3-1 |
| Debian 14 | libsepol | 3.3-1 |
| Red Hat Enterprise Linux 8 | libsepol | 0:2.9-3.el8 |
| Red Hat Enterprise Linux 8 | libsepol-debuginfo | 0:2.9-3.el8 |
| Red Hat Enterprise Linux 8 | libsepol-debugsource | 0:2.9-3.el8 |
| Red Hat Enterprise Linux 8 | libsepol-devel | 0:2.9-3.el8 |
| Red Hat Enterprise Linux 8 | libsepol-static | 0:2.9-3.el8 |
| Rocky Linux 8 | libsepol | 0:2.9-3.el8 |
| Ubuntu 18.04 LTS | libsepol | 2.7-1ubuntu0.1 |
| Ubuntu 20.04 LTS | libsepol | 3.0-1ubuntu0.1 |
| Ubuntu Pro 16.04 LTS | libsepol | 2.4-2ubuntu0.1~esm1 |