Linux Kernel Vulnerability Affects SELinux Permissions Handling

CVE-2026-80757

What is CVE-2026-80757?

A vulnerability in the Linux kernel affects SELinux's permission handling, allowing an out-of-bounds heap write if a class declares a smaller number of permissions than its inherited common permissions. This can lead to unauthorized access and exploitation of system resources. The vulnerability has been addressed by rejecting classes with a permission count below that of their inherited common, ensuring policies are well-formed and mitigated against such limitations.

References