CVE-2026-43498: accel/ivpu: Disallow re-exporting imported GEM objects
In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Disallow re-exporting imported GEM objects Prevent re-exporting of imported GEM buffers by adding a custom prime_handle_to_fd callback that checks if the object is imported and returns -EOPNOTSUPP if so. Re-exporting imported GEM buffers causes loss of buffer flags settings, leading to incorrect device access and data corruption.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43498?
CVE-2026-43498 has a risk rating of 37, indicating a moderate severity level.
What systems are affected by CVE-2026-43498?
CVE-2026-43498 affects the Linux kernel related to the accel/ivpu subsystem.
How do I fix CVE-2026-43498?
To fix CVE-2026-43498, ensure that you upgrade to the patched version of the Linux kernel that resolves this vulnerability.
What is the main issue described in CVE-2026-43498?
CVE-2026-43498 addresses the improper handling of imported GEM objects by disallowing their re-exporting.
When was CVE-2026-43498 published?
CVE-2026-43498 was published on May 21, 2026.