CVE-2021-36086

The CIL compiler in SELinux 3.2 has a use-after-free vulnerability in the cil_reset_classpermission function, called from cil_reset_classperms_set and cil_reset_classperms_list. This could lead to unexpected behavior or potential exploitation by an attacker.

The risk involves potential remote code execution or privilege escalation in systems using SELinux, which could compromise the integrity and confidentiality of organizational data.

It is recommended to immediately update SELinux to version 3.3 or later, which includes a fix for this vulnerability.