CVE-2026-80670

A flaw was found in the Linux kernel's perf tools. The machine__resolve() function, responsible for resolving machine addresses, does not properly validate CPU index values from untrusted perf.data samples. A local attacker could provide a specially crafted perf.data file with a large CPU index, leading to an out-of-bounds heap read. This could result in information disclosure or a denial of service.

A moderate severity out-of-bounds read flaw was found in the Linux kernel's perf tools. The machine__resolve() function uses a CPU index taken from an untrusted perf.data sample to look up CPU topology without validating it against the number of available CPUs, so processing a specially crafted perf.data file containing a large CPU index causes an out-of-bounds heap read. This can result in limited information disclosure or a crash of the perf tool. Exploitation requires local access to supply the crafted perf.data file and user interaction for it to be processed; the flaw affects the userspace perf tool, not the running kernel. All Red Hat Enterprise Linux and Red Hat In-Vehicle OS streams listed for this flaw are currently marked not affected because the vulnerable code is not present in the shipped products. Red Hat's severity (MODERATE, CVSS 3.1 base score 5.5 with a local attack vector) differs significantly from the upstream CVE record (CRITICAL, CVSS 9.1 with a network attack vector) because exploitation is not network-reachable: an attacker must locally supply a crafted perf.data file that is then processed with the perf tool.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.