CVE-2026-43395: drm/xe/sync: Cleanup partially initialized sync on parse failure
In the Linux kernel, the following vulnerability has been resolved:
drm/xe/sync: Cleanup partially initialized sync on parse failure
xesyncentryparse() can allocate references (syncobj, fence, chain fence, or user fence) before hitting a later failure path. Several of those paths returned directly, leaving partially initialized state and leaking refs.
Route these error paths through a common freesync label and call xesyncentrycleanup(sync) before returning the error.
(cherry picked from commit f939bdd9207a5d1fc55cced5459858480686ce22)
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43395?
The severity of CVE-2026-43395 is classified as medium with a CVSS score of 5.5.
How do I fix CVE-2026-43395?
You can fix CVE-2026-43395 by applying the available patch from the Linux kernel updates.
What software is affected by CVE-2026-43395?
CVE-2026-43395 affects the Linux kernel maintained by The Linux Foundation.
What type of vulnerability is CVE-2026-43395?
CVE-2026-43395 is a vulnerability related to the cleanup of partially initialized sync objects on parse failure.
When was CVE-2026-43395 published?
CVE-2026-43395 was published on May 8, 2026.