Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
SELinuxProject/selinux
main @ efd1aa5
96
Fixes
0
CVEs
HIGH
Peak severity
52.9%
Coverage
Highlights
Privilege Escalation: 11 prior fixes. Scrutinize any change in this area.
sandbox/seunshare.c: most-fixed (16 issues). Treat as high-risk during review.
66 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Integer Overflow: Recurring unchecked arithmetic in size calculations (malloc/realloc/multiplication) leads to heap corruption and out-of-bounds writes across multiple components.
Buffer Overflow: Unsafe string operations (sprintf, strcpy, strcat) and missing size/bounds checks in policy parsing and utilities allow memory corruption from crafted inputs.
Privilege Escalation: Multiple sandbox escape vectors: unchecked privilege drops, missing mount flags, symlink following, and TOCTOU in directory operations.