SELinux Permission Vulnerability in Linux Kernel by Linux Foundation

CVE-2026-80755

What is CVE-2026-80755?

A vulnerability in the Linux kernel related to SELinux permission handling has been identified. The issue arises when a permission value exceeds the number of defined permissions for a class, resulting in an out-of-bounds heap write. This occurs because the 'perm_read()' function does not adequately bound the permission value against the class permissions defined in the policy image. As a consequence, when 'security_get_permissions()' writes to an incorrectly sized kcalloc() array, it can lead to memory corruption. While well-formed policies remain unaffected, this flaw poses a potential risk if permissions are improperly defined, necessitating prompt attention from system administrators.

References