The Linux kernel’s accel/ivpu subsystem performed GEM buffer handling. A flaw allowed callers to re‑export imported GEM buffers, which caused the buffer’s flag settings to be lost. The loss of these settings could lead the driver to treat subsequent accesses to the buffer incorrectly and result in data corruption. The issue was fixed by adding a custom prime_handle_to_fd callback that checks whether the object has been imported and returns –EOPNOTSUPP, thereby preventing re‑export.

Any Linux kernel that includes the accel/ivpu driver and GEM buffer handling logic before the patch. The CPE string indicates a generic Linux kernel, and no specific version ranges are provided, meaning any kernel built with this subsystem before the commit is affected.

The EPSS score of 0.00024 (0.024%) indicates a very low exploitation probability, and the vulnerability is not listed in CISA’s KEV catalog. The kernel code that manages GEM buffers is a core driver component, so exploitation would typically require local or privileged interaction with the graphics subsystem. Based on the description, it is inferred that re‑exporting imported GEM buffers could lead to data corruption, but no details on privilege escalation or remote exploitation are provided.