Linux Kernel Vulnerability Affects SELinux Boolean Definitions

CVE-2026-80913

What is CVE-2026-80913?

A vulnerability in the Linux kernel's SELinux component allows for improper input validation when defining boolean values. Specifically, the issue arises when the count of boolean definitions exceeds the actual values present, leading to NULL entries in the boolean handling array. This can result in undefined behavior when accessing these entries, potentially impacting system security. The vulnerability has been addressed by ensuring that all declared booleans are properly defined within the policy, reinforcing the robustness of SELinux policies against such discrepancies.

References