PT-2026-42455 · Linux · Linux Kernel

CVE-2026-43498

·

Published

2026-05-21

·

Updated

2026-07-28

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue in the accel/ivpu component allows the re-exporting of imported GEM (Graphics Execution Manager) objects. This occurs because the system fails to verify if a buffer is imported during the export process. Re-exporting these buffers results in the loss of buffer flag settings, which can lead to incorrect device access and data corruption. The fix involves implementing a custom prime handle to fd() function that checks for imported objects and returns an error if re-exporting is attempted.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-119CWE-120CWE-787

Related Identifiers

BDU:2026-09510
CVE-2026-43498
OPENSUSE-SU-2026:10859-1
USN-8566-1
USN-8568-1
USN-8569-1
USN-8593-1
USN-8603-1
USN-8618-1

Affected Products

Linux Kernel