CVE-2015-3170: Selinux Project Selinux

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

selinux-policy when sysctl fs.protected_hardlinks are set to 0 allows local users to cause a denial of service (SSH login prevention) by creating a hardlink to /etc/passwd from a directory named .config, and updating selinux-policy.

Affected products

• Selinux Project Selinux: affected versions not specified

Published 2017-07-21. Last modified 2026-06-17.