CVE-2021-36086

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-36086
The CIL compiler in SELinux 3.2 has a use-after-free in cil_reset_classpermission (called from cil_reset_classperms_set and cil_reset_classperms_list).

3.3 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

2.1 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32177 Exploit Issue Tracking Patch Third Party Advisory
https://github.com/SELinuxProject/selinux/commit/c49a8ea09501ad66e799ea41b8154b6770fec2c8 Patch Third Party Advisory
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/selinux/OSV-2021-536.yaml Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/ Broken Link
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32177 Exploit Issue Tracking Patch Third Party Advisory
https://github.com/SELinuxProject/selinux/commit/c49a8ea09501ad66e799ea41b8154b6770fec2c8 Patch Third Party Advisory
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/selinux/OSV-2021-536.yaml Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/10/msg00021.html Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/ Broken Link
https://security.netapp.com/advisory/ntap-20250207-0004/ Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h610c:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h610s:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:netapp:h615c_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h615c:-:*:*:*:*:*:*:*

Configuration 7 (hide)

cpe:2.3:a:selinux_project:selinux:*:*:*:*:*:*:*:*

Configuration 8 (hide)

cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*
History

24 Mar 2026, 20:25

Type Values Removed Values Added
References () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/ - () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/ - Broken Link
References () https://lists.debian.org/debian-lts-announce/2024/10/msg00021.html - () https://lists.debian.org/debian-lts-announce/2024/10/msg00021.html - Mailing List, Third Party Advisory
References () https://security.netapp.com/advisory/ntap-20250207-0004/ - () https://security.netapp.com/advisory/ntap-20250207-0004/ - Third Party Advisory
First Time Netapp hci Compute Node
Netapp h615c Firmware
Netapp h610c
Netapp h610s Firmware
Netapp
Netapp h610s
Netapp active Iq Unified Manager
Netapp h610c Firmware
Netapp h615c
Debian debian Linux
Debian
Netapp bootstrap Os
CPE cpe:2.3:o:selinux_project:selinux:-:*:*:*:*:*:*:* cpe:2.3:o:netapp:h610c_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h615c:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:bootstrap_os:-:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h610s:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:h615c_firmware:-:*:*:*:*:*:*:*
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*
cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*
cpe:2.3:a:selinux_project:selinux:*:*:*:*:*:*:*:*
cpe:2.3:h:netapp:h610c:-:*:*:*:*:*:*:*
cpe:2.3:o:netapp:h610s_firmware:-:*:*:*:*:*:*:*

03 Nov 2025, 22:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/10/msg00021.html -

03 Nov 2025, 21:15

Type Values Removed Values Added
References
  • () https://security.netapp.com/advisory/ntap-20250207-0004/ -

21 Nov 2024, 06:13

Type Values Removed Values Added
References () https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32177 - Exploit, Issue Tracking, Patch, Third Party Advisory () https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=32177 - Exploit, Issue Tracking, Patch, Third Party Advisory
References () https://github.com/SELinuxProject/selinux/commit/c49a8ea09501ad66e799ea41b8154b6770fec2c8 - Patch, Third Party Advisory () https://github.com/SELinuxProject/selinux/commit/c49a8ea09501ad66e799ea41b8154b6770fec2c8 - Patch, Third Party Advisory
References () https://github.com/google/oss-fuzz-vulns/blob/main/vulns/selinux/OSV-2021-536.yaml - Third Party Advisory () https://github.com/google/oss-fuzz-vulns/blob/main/vulns/selinux/OSV-2021-536.yaml - Third Party Advisory
References () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/ - () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/ -

07 Nov 2023, 03:36

Type Values Removed Values Added
References
  • {'url': 'https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/', 'name': 'FEDORA-2021-67efe88c29', 'tags': ['Mailing List', 'Third Party Advisory'], 'refsource': 'FEDORA'}
  • () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U7ZYR3PIJ75N6U2IONJWCKZ5L2NKJTGR/ -
Information

Published : 2021-07-01 03:15

Updated : 2026-03-24 20:25

NVD link : CVE-2021-36086

Mitre link : CVE-2021-36086

CVE.ORG link : CVE-2021-36086

JSON object : View

Products Affected

netapp

  • h610s_firmware
  • h610c
  • hci_compute_node
  • bootstrap_os
  • h615c_firmware
  • h610s
  • h615c
  • active_iq_unified_manager
  • h610c_firmware

selinux_project

  • selinux

debian

  • debian_linux

fedoraproject

  • fedora
CWE
CWE-416

Use After Free