CVE-2026-43395 drm/xe/sync: Cleanup partially initialized sync on parse failure
A resource leak in the Linux kernel's Xe GPU driver allows attackers to cause a denial of service by triggering parse failures that leave references unreleased.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-43395?
CVE-2026-43395 is a medium-severity vulnerability in Linux kernel, published on 8 May 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
drm/xe/sync: Cleanup partially initialized sync on parse failure
xe_sync_entry_parse() can allocate references (syncobj, fence, chain fence, or user fence) before hitting a later failure path. Several of those paths returned directly, leaving partially initialized state and leaking refs.
Route these error paths through a common free_sync label and call xe_sync_entry_cleanup(sync) before returning the error.
(cherry picked from commit f939bdd9207a5d1fc55cced5459858480686ce22)
Weakness: CWE-459
Which versions are affected by CVE-2026-43395?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2026-43395?
Apply the vendor's patch.
Is CVE-2026-43395 being exploited?
There is no known exploitation of CVE-2026-43395 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2026-43395, DEBIAN-CVE-2026-43395, GHSA-2v48-6xmq-vxhp, ROOT-OS-UBUNTU-2404-CVE-2026-43395, UBUNTU-CVE-2026-43395.