CVE-2026-80912

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the SELinux component where the security get classes() function sizes an array based on p classes.nprim and fills it at value - 1. If a class value is not defined by the policy, it results in a NULL entry. Subsequently, sel make classes() passes every entry to sel make dir(), leading to a dereference in d alloc name(). While the class symbol table can be sparse, this specific getter constructs its array directly from the hash table without using a predicate to validate the entries.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.