selinux: reject a permission value exceeding the class permission count

...

PT-2026-84955

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds heap write exists in the SELinux component. The class read function accepts a permission count nprim from the policy image without verifying if it covers the inherited...