CVE-2026-43395

About vulnerability

In the Linux kernel, the following vulnerability has been resolved: drm/xe/sync: Cleanup partially initialized sync on parse failure xe_sync_entry_parse() can allocate references (syncobj, fence, chain fence, or user fence) before hitting a later failure path. Several of those paths returned directly, leaving partially initialized state and leaking refs. Route these error paths through a common free_sync label and call xe_sync_entry_cleanup(sync) before returning the error. (cherry picked from commit f939bdd9207a5d1fc55cced5459858480686ce22) A flaw was found in the Linux kernel’s drm/xe/sync subsystem. When processing synchronization entries, the xe_sync_entry_parse() function may fail to properly clean up partially initialized resources. This improper handling of error paths can lead to a resource leak. A local attacker could potentially exploit this to cause resource exhaustion, resulting in a Denial of Service (DoS).

Live-patch status from KernelCare for each operating system.