bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec()

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-45839 · Microsoft / collected KEV context

cve-program · CVE-2026-45839

• https://git.kernel.org/stable/c/c8e49b79c4b48bd687706ff6e9c82638dc81ef80
• https://git.kernel.org/stable/c/a9e777f856cd2f1efc106afc7bf21aef868509d5
• https://git.kernel.org/stable/c/669349b4612c26b3d7aacfa99d7174681bd19223
• https://git.kernel.org/stable/c/3ff85ae79e1a74baeb916b78a63d821f6d19a994
• https://git.kernel.org/stable/c/36a9012f76ba8d9189ae56a1f8bb7c87c07a1f3a
• https://git.kernel.org/stable/c/76f2ebaf79a9ae6d0737b87f045fe769e425d78f
• https://git.kernel.org/stable/c/99dbab7b5a12d8f58d5b0aa2f7a1fe656a70f4b2
• https://git.kernel.org/stable/c/1c22483a2c4bbf747787f328392ca3e68619c4dc

No related operational record is retained in the current change model.