{"apiVersion":"1.0","identifier":"CVE-2026-80670","description":"In the Linux kernel, the following vulnerability has been resolved: perf tools: Use perf_env__get_cpu_topology() in machine__resolve() machine__resolve() accesses env->cpu[al->cpu].socket_id after checking al->cpu >= 0 and env->cpu != NULL, but without validating al->cpu against env->nr_cpus_avail. Since al->cpu comes from the untrusted perf.data sample, a crafted file with a large CPU index causes an out-of-bounds heap read. Use perf_env__get_cpu_topology() which validates both NULL and bounds. Also bounds-check al->cpu before the cast to struct perf_cpu (int16_t): without this, values like 65536 silently truncate to 0, bypassing the accessor-s internal check and returning CPU 0-s topology.","publishedAt":"2026-08-28T08:16:52","lastModifiedAt":"2026-08-28T08:16:52","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-80670","cvssScore":null,"cvssVector":"Pending","epssProbability":0.00176,"riskScore":0,"affectedProduct":"Linux kernel","affectedVersions":"unknown","vulnerabilityType":"Kernel","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-80670","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-80670","en":"https://www.redsauce.net/en/cves/CVE-2026-80670","fr":"https://www.redsauce.net/fr/cves/CVE-2026-80670","pt":"https://www.redsauce.net/pt/cves/CVE-2026-80670","de":"https://www.redsauce.net/de/cves/CVE-2026-80670","sk":"https://www.redsauce.net/sk/cves/CVE-2026-80670","el":"https://www.redsauce.net/el/cves/CVE-2026-80670"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-80670"}}