Review reviewHigh

CVE-2026-43498

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Disallow re-exporting imported GEM objects Prevent re-exporting of imported GEM buffers by adding a custom prime_handle_to_fd callback that checks if the object is imported and returns -EOPNOTSUPP if so. Re-exporting imported GEM buffers causes loss of buffer flags settings, leading to incorrect device access and data corruption.

CVSS: 7.8
EPSS: 0.11%
CISA KEV: Not listed
Published: 2026.05.21

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.11%

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Linux Linux, linux kernel
Affected versions: >= 57557964b582238d5ee4b8538d1c4694f91c2186 < 3756043dd695bba34cc728cdc5688dcb49ac8043, >= 57557964b582238d5ee4b8538d1c4694f91c2186 < 7dd57d7a6350770dfc283287125c409e995200e0, >= 6.19, >= 6.19 < 7.0.7, 7.1
Fixed versions: 7.0.7

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: CWE-787