CVE-2026-80670

In the Linux kernel, the following vulnerability has been resolved: perf tools: Use perfenvgetcputopology in machineresolve machineresolve accesses env-cpual-cpu.socketid after checking al-cpu = 0 and env-cpu != NULL, but without validating al-cpu against env-nrcpusavail. Since al-cpu comes from...

EUVD-2026-67547

In the Linux kernel, the following vulnerability has been resolved: perf sched: Fix registerpid overflow, strcpy, and BUGON registerpid has several issues when processing untrusted perf.data: 1. Integer overflow: pid + 1 sizeofstruct taskdesc can wrap to a small value on 32-bit systems when pid i...

CVE-2026-80671

Linux kernel perf sched contains multiple memory-safety flaws in register_pid() when parsing untrusted perf.data files. An integer overflow in the (pid + 1) * sizeof(struct task_desc *) calculation can wrap on 32-bit systems, yielding a tiny allocation and subsequent out-of-bounds writes. A heap ...

EUVD-2026-67546

In the Linux kernel, the following vulnerability has been resolved: perf tools: Use perfenvgetcputopology in machineresolve machineresolve accesses env-cpual-cpu.socketid after checking al-cpu = 0 and env-cpu != NULL, but without validating al-cpu against env-nrcpusavail. Since al-cpu comes from...

CVE-2026-80670

CVE-2026-80670 affects the Linux kernel perf tools component. The function machine__resolve() reads env->cpu[al->cpu].socket_id after checking al->cpu >= 0 and env->cpu != NULL, but fails to validate al->cpu against env->nr_cpus_avail. Since al->cpu originates from an untr...