CVE-2026-80757
Received Received - Intake

SELinux Policy Class Permission Count Validation Flaw

Publication date: 2026-09-03

Last updated on: 2026-09-03

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: selinux: reject a class permission count below its inherited common security_get_permissions() maps an inherited common's permissions into an array sized by the class's own permissions.nprim, but class_read() takes that nprim verbatim from the policy image and never checks that it covers the common. A class that inherits a common of N permissions while declaring a smaller nprim is accepted, and on load the common's permissions are written past the class-sized array -- an out-of-bounds heap write. Reject a class whose permission count is below its inherited common's. Well-formed policies, where the class count already includes the inherited permissions, are unaffected.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-03
Last Modified
2026-09-03
Generated
2026-09-03
AI Q&A
2026-09-03
EPSS Evaluated
N/A
NVD
CVE-2026-80757
EUVD
EUVD-2026-70361

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Linux kernel vulnerability where a class permission count is incorrectly mapped without checking if it covers inherited common permissions. This leads to an out-of-bounds heap write when security_get_permissions() processes the class's permissions, potentially causing memory corruption or system instability.

Detection Guidance

This vulnerability is specific to the Linux kernel's SELinux implementation and requires kernel-level inspection. Detection involves checking the SELinux policy for malformed class definitions where the permission count is below its inherited common. Use commands like 'sestatus' to verify SELinux status and 'sesearch -A' to analyze policies. Kernel logs may also show related errors during policy load.

Impact Analysis

This vulnerability could allow an attacker to execute arbitrary code, escalate privileges, or crash the system by exploiting the heap write. Systems running vulnerable Linux kernels may experience instability or security breaches if exploited.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for this issue. If SELinux is enabled, ensure your policy files are correctly formatted and do not contain classes with permission counts below their inherited commons. Monitor kernel logs for errors during policy reloads.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80757. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart