CVE-2026-80756

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL dereference occurs in the selinux policy cancel() function when a first policy load fails while building the selinuxfs tree. This happens because sel write load() calls selinux policy cancel() upon the failure of sel make policy nodes(), but during the initial load, no outgoing policy exists and the state->policy variable remains NULL. This issue is triggered via a write operation to the /sys/fs/selinux/load endpoint.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.