CVE-2026-80670

CVE-2026-80670 affects the Linux kernel perf tools component. The function machine__resolve() reads env->cpu[al->cpu].socket_id after checking al->cpu >= 0 and env->cpu != NULL, but fails to validate al->cpu against env->nr_cpus_avail. Since al->cpu originates from an untr...