CVE-2026-80670

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds heap read exists in the machine resolve() function. The issue occurs because the function accesses env->cpu[al->cpu].socket id without validating the al->cpu variable against env->nr cpus avail. Since al->cpu is derived from an untrusted perf.data sample, a specially crafted file containing a large CPU index can trigger this read. Additionally, a lack of bounds-checking before casting al->cpu to a 16-bit integer (int16 t) allows large values to be truncated to 0, bypassing internal checks and incorrectly returning the topology of CPU 0.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.