CVE-2021-36085

The CIL compiler in SELinux 3.2 has a use-after-free vulnerability in the __cil_verify_classperms function, called from __verify_map_perm_classperms and hashtab_map. This could lead to unexpected behavior or potential exploitation by an attacker.

The risk involves potential remote code execution or privilege escalation in systems using SELinux, which could compromise the integrity and confidentiality of organizational data.

It is recommended to immediately update SELinux to version 3.3 or later, which includes a fix for this vulnerability.