Vulnerability in selinux Package: Improper NULL Termination in secclass_map Permissions
Summary
GSD-2021-1000402: selinux: add proper NULL termination to the secclass_map permissions. Affects Kernel versions >= ec27c3568a34c7fe5fcf4ac0a354eda77687f7eb, < 4c0ddc8712d9cd26459091c9f0c9e1a9f64815dc. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The selinux package is a security module in the Linux Kernel that provides a mechanism for enforcing access control policies. It implements mandatory access control (MAC) using the Security-Enhanced Linux (SELinux) framework. SELinux allows administrators to define fine-grained policies to restrict access to system resources based on user roles and types. This vulnerability affects the secclass_map permissions in the selinux package.
Vulnerability Detail
The vulnerability arises from a lack of proper NULL termination in the secclass_map permissions of the selinux package. This issue was introduced in version v4.15 of the Linux Kernel by commit ec27c3568a34c7fe5fcf4ac0a354eda77687f7eb and was fixed in version v5.10.37 by commit 4c0ddc8712d9cd26459091c9f0c9e1a9f64815dc. The absence of NULL termination can lead to potential security vulnerabilities, although the actual impact and attack plausibility have not been proven yet.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no known workaround for this vulnerability. Updating to the fixed version is the recommended solution.
Conclusion
In conclusion, the selinux package is vulnerable to an issue related to improper NULL termination in the secclass_map permissions. To mitigate this vulnerability, it is crucial to update the Linux Kernel to version v5.10.37 or later. For further support on vulnerability remediation, you can reach out to DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The selinux package is a security module in the Linux Kernel that implements mandatory access control (MAC) using the Security-Enhanced Linux (SELinux) framework.
The impact of this vulnerability is currently unknown as the actual attack plausibility has not been proven. However, it is important to update to the fixed version to mitigate any potential security risks.
To fix this vulnerability, update the Linux Kernel to version v5.10.37 or later by pulling the latest changes from the official Linux Kernel repository.
No, there is no known workaround for this vulnerability. Updating to the fixed version is the recommended solution.
You can find more information about this vulnerability in the official Linux Kernel repository and the vulnerability database maintained by the Cloud Security Alliance.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.
