{"id":"CVE-2026-43395","summary":"drm/xe/sync: Cleanup partially initialized sync on parse failure","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe/sync: Cleanup partially initialized sync on parse failure\n\nxe_sync_entry_parse() can allocate references (syncobj, fence, chain fence,\nor user fence) before hitting a later failure path. Several of those paths\nreturned directly, leaving partially initialized state and leaking refs.\n\nRoute these error paths through a common free_sync label and call\nxe_sync_entry_cleanup(sync) before returning the error.\n\n(cherry picked from commit f939bdd9207a5d1fc55cced5459858480686ce22)","modified":"2026-07-22T18:14:49.731526132Z","published":"2026-05-08T14:21:38.756Z","related":["SUSE-SU-2026:3130-1","SUSE-SU-2026:3166-1"],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43395.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/1bfd7575092420ba5a0b944953c95b74a5646ff8"},{"type":"WEB","url":"https://git.kernel.org/stable/c/91c228f96fcfacc2341a58815b1da8c69da94ebb"},{"type":"WEB","url":"https://git.kernel.org/stable/c/af65cd1853599394b94201c08bed7a46717db478"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f0af63ffa06306f12592cd3919fad6957b425e1b"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43395.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43395"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"dd08ebf6c3525a7ea2186e636df064ea47281987"},{"fixed":"91c228f96fcfacc2341a58815b1da8c69da94ebb"},{"fixed":"af65cd1853599394b94201c08bed7a46717db478"},{"fixed":"f0af63ffa06306f12592cd3919fad6957b425e1b"},{"fixed":"1bfd7575092420ba5a0b944953c95b74a5646ff8"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43395.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.8.0"},{"fixed":"6.12.78"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.19"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"6.19.9"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43395.json"}}],"schema_version":"1.7.5"}