The vulnerability of the remove waiter() function in the ivpu component of the Linux operating system’s kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

🗓️ 29 Jun 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

The ivpu component has vulnerabilities in remove_waiter and prime_handle_to_fd causing disclosure and integrity or availability impact.

Reporter	Title	Published	Views	Family All 67
ATTACKERKB	CVE-2026-43499	21 May 202612:17	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-1753)	27 May 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : bpftool6.18, kernel6.18, kernel6.18-devel (ALAS2023-2026-1754)	27 May 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : bpftool, kernel, kernel-devel (ALAS2023-2026-1882)	22 Jun 202600:00	–	nessus
Tenable Nessus	openSUSE 16 Security Update : kernel (openSUSE-SU-2026:20912-1)	11 Jun 202600:00	–	nessus
Tenable Nessus	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50319)	26 Jun 202600:00	–	nessus
Tenable Nessus	SUSE SLES15 Security Update : kernel (SUSE-SU-2026:2310-1)	14 Jun 202600:00	–	nessus
Tenable Nessus	SUSE SLES15 Security Update : kernel (SUSE-SU-2026:2383-1)	14 Jun 202600:00	–	nessus
Tenable Nessus	SUSE SLES15 Security Update : kernel (SUSE-SU-2026:2421-1)	20 Jun 202600:00	–	nessus
Tenable Nessus	SUSE SLES12 Security Update : kernel (SUSE-SU-2026:2450-1)	20 Jun 202600:00	–	nessus

Source	Link
lore	www.lore.kernel.org/linux-cve-announce/2026052158-CVE-2026-43499-1294@gregkh/T/
git	www.git.kernel.org/stable/c/3bfdc63936dd4773109b7b8c280c0f3b5ae7d349
git	www.git.kernel.org/stable/c/3fb7394a837740770f0d6b4b30567e60786a63f2
git	www.git.kernel.org/stable/c/6d52dfcb2a5db86e346cf51f8fcf2071b8085166
git	www.git.kernel.org/stable/c/88614876370aac8ad1050ad785a4c095ba17ac11
git	www.git.kernel.org/stable/c/8a1fc8d698ac5e5916e3082a0f74450d71f9611f
dbugs	www.dbugs.ptsecurity.com/vulnerability/PT-2026-42456
suse	www.suse.com/security/cve/CVE-2026-43499.html
security-tracker	www.security-tracker.debian.org/tracker/CVE-2026-43499
github	www.github.com/MobiusM/CVE-2026-43499

29 Jun 2026 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 26.8

CVSS 37.8

EPSS0.00125

ivpu component linux kernel remove waiter handle to fd use after free memory safety