Selinuxproject Selinux
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Selinuxproject Selinux.
By the Year
In 2026 there have been 2 vulnerabilities in Selinuxproject Selinux. Selinux did not have any published security vulnerabilities last year. That is, 2 more vulnerabilities have already been reported in 2026 as compared to last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 2 | 0.00 |
| 2025 | 0 | 0.00 |
| 2024 | 0 | 0.00 |
| 2023 | 0 | 0.00 |
| 2022 | 0 | 0.00 |
| 2021 | 4 | 0.00 |
| 2020 | 0 | 0.00 |
| 2019 | 0 | 0.00 |
| 2018 | 1 | 4.40 |
It may take a day or so for new Selinux vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Selinuxproject Selinux Security Vulnerabilities
SELinux Policycoreutils 3.10 Unconfined Kill Auth Bypass
CVE-2026-59677
- July 23, 2026
A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context This issue affects policycoreutils through 3.10.
AuthZ
seunshare TOCTOU Race in Selinux Policycoreutils 3.10 Arbitrary File Deletion
CVE-2026-59676
- July 23, 2026
A Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in seunshare of selinux policycoreutils allows a user calling seunshare that is running in the unconfined SELinux domain to delete arbitrary root-owned files, This issue affects policycoreutils through 3.10.
TOCTTOU
The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check_neverallow)
CVE-2021-36087
- July 01, 2021
The CIL compiler in SELinux 3.2 has a heap-based buffer over-read in ebitmap_match_any (called indirectly from cil_check_neverallow). This occurs because there is sometimes a lack of checks for invalid statements in an optional block.
The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called
CVE-2021-36086
- July 01, 2021
The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set and cil_reset_classperms_list).
The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called
CVE-2021-36085
- July 01, 2021
The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __verify_map_perm_classperms and hashtab_map).
The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called
CVE-2021-36084
- July 01, 2021
The CIL compiler in SELinux 3.2 has a use-after-free in __cil_verify_classperms (called from __cil_verify_classpermission and __cil_pre_verify_helper).
Context relabeling of filesystems is vulnerable to symbolic link attack
CVE-2018-1063
4.4 - Medium
- March 02, 2018
Context relabeling of filesystems is vulnerable to symbolic link attack, allowing a local, unprivileged malicious entity to change the SELinux context of an arbitrary file to a context with few restrictions. This only happens when the relabeling process is done, usually when taking SELinux state from disabled to enable (permissive or enforcing). The issue was found in policycoreutils 2.5-11.
insecure temporary file
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Selinuxproject Selinux or by Selinuxproject? Click the Watch button to subscribe.
