CVE-2026-43395
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2026-05-08
Modified: 2026-11-11
First seen: 2026-11-06
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: drm/xe/sync: Cleanup partially initialized sync on parse failure xe_sync_entry_parse() can allocate references (syncobj, fence, chain fence, or user fence) before hitting a later failure path. Several of those paths returned directly, leaving partially initialized state and leaking refs. Route these error paths through a common free_sync label and call xe_sync_entry_cleanup(sync) before returning the error. (cherry picked from commit f939bdd9207a5d1fc55cced5459858480686ce22)
Weakness Classification (1)
Affected Software (7)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | dd08ebf6c3525a7ea2186e636df064ea47281987 < 91c228f96fcfacc2341a58815b1da8c69da94ebb |
| Linux | Linux | dd08ebf6c3525a7ea2186e636df064ea47281987 < af65cd1853599394b94201c08bed7a46717db478 |
| Linux | Linux | dd08ebf6c3525a7ea2186e636df064ea47281987 < f0af63ffa06306f12592cd3919fad6957b425e1b |
| Linux | Linux | dd08ebf6c3525a7ea2186e636df064ea47281987 < 1bfd7575092420ba5a0b944953c95b74a5646ff8 |
| Linux | Linux | 6.8 |
| linux | linux_kernel | 6.8 – 6.12.78 |
| linux | linux_kernel | 7.0 |