Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-43395

drm/xe/sync: Cleanup partially initialized sync on parse failure

Description

In the Linux kernel, the following vulnerability has been resolved: drm/xe/sync: Cleanup partially initialized sync on parse failure xe_sync_entry_parse() can allocate references (syncobj, fence, chain fence, or user fence) before hitting a later failure path. Several of those paths returned directly, leaving partially initialized state and leaking refs. Route these error paths through a common free_sync label and call xe_sync_entry_cleanup(sync) before returning the error. (cherry picked from commit f939bdd9207a5d1fc55cced5459858480686ce22)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • dd08ebf6c3525a7ea2186e636df064ea47281987 to < 91c228f96fcfacc2341a58815b1da8c69da94ebbaffected
  • dd08ebf6c3525a7ea2186e636df064ea47281987 to < af65cd1853599394b94201c08bed7a46717db478affected
  • dd08ebf6c3525a7ea2186e636df064ea47281987 to < f0af63ffa06306f12592cd3919fad6957b425e1baffected
  • dd08ebf6c3525a7ea2186e636df064ea47281987 to < 1bfd7575092420ba5a0b944953c95b74a5646ff8affected

Linux Linux

Default version status: affected

  • 6.8affected
  • 0 to < 6.8unaffected
  • 6.12.78 to ≤ 6.12.*unaffected
  • 6.18.19 to ≤ 6.18.*unaffected
  • 6.19.9 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References