Threats tagged 'ghsa-jcj2-5fhp-x66j'

A vulnerability in the Linux kernel's SELinux implementation allows a permission value exceeding the class permission count to be processed, leading to an out-of-bounds heap write. This occurs because perm_read() does not properly bound the permission value by the owning class's permission count (nprim), causing security_get_permissions() to write outside allocated memory. Well-formed policies are not affected by this issue.