Riskcovery

CVE-2026-43498

accel/ivpu: Disallow re-exporting imported GEM objects

State
Published
Severity
7.8 High
Published
May 21, 2026
Updated
Aug 5, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

accel/ivpu: Disallow re-exporting imported GEM objects

Prevent re-exporting of imported GEM buffers by adding a custom prime_handle_to_fd callback that checks if the object is imported and returns -EOPNOTSUPP if so.

Re-exporting imported GEM buffers causes loss of buffer flags settings, leading to incorrect device access and data corruption.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 57557964b582238d5ee4b8538d1c4694f91c2186 to before 3756043dd695bba34cc728cdc5688dcb49ac8043Affected
  • 57557964b582238d5ee4b8538d1c4694f91c2186 to before 7dd57d7a6350770dfc283287125c409e995200e0Affected
LinuxLinux
  • 6.19Affected
  • before 6.19Not affected
  • 7.0.7 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.