{"id":"CVE-2026-43396","title":"drm/xe/sync: Fix user fence leak on alloc failure","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe/sync: Fix user fence leak on alloc failure\n\nWhen dma_fence_chain_alloc() fails, properly release the user fence\nreference to prevent a memory leak.\n\n(cherry pick…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 0995c2fc39b0f998d40f5d276f67ae22fc1c37c3 < 05edc78eb4699e8e000a62aaa8dace50a17e19e3","Linux >= 0995c2fc39b0f998d40f5d276f67ae22fc1c37c3 < f8f90b33934b307f6e4599b9fae38aa1ee5441a7","Linux >= 0995c2fc39b0f998d40f5d276f67ae22fc1c37c3 < 0879c3f04f67e2a1677c25dcc24669ce21eb6a6c","Linux 6.18"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T15:37:05.170740Z"},"published":"2026-05-08","updated":"2026-11-06","sourceUpdated":"2026-11-06T15:42:51.369Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-43396","references":[{"url":"https://git.kernel.org/stable/c/05edc78eb4699e8e000a62aaa8dace50a17e19e3"},{"url":"https://git.kernel.org/stable/c/f8f90b33934b307f6e4599b9fae38aa1ee5441a7"},{"url":"https://git.kernel.org/stable/c/0879c3f04f67e2a1677c25dcc24669ce21eb6a6c"}],"tags":["cve.org"],"epss":0.00121,"epssPercentile":0.01898,"ingestedAt":"2026-11-06T15:54:03.927Z","slug":"CVE-2026-43396","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/xe/sync: Fix user fence leak on alloc failure\n\nWhen dma_fence_chain_alloc() fails, properly release the user fence\nreference to prevent a memory leak.\n\n(cherry picked from commit a5d5634cde48a9fcd68c8504aa07f89f175074a0)\n\n## Affected\n\n- `Linux >= 0995c2fc39b0f998d40f5d276f67ae22fc1c37c3 < 05edc78eb4699e8e000a62aaa8dace50a17e19e3`\n- `Linux >= 0995c2fc39b0f998d40f5d276f67ae22fc1c37c3 < f8f90b33934b307f6e4599b9fae38aa1ee5441a7`\n- `Linux >= 0995c2fc39b0f998d40f5d276f67ae22fc1c37c3 < 0879c3f04f67e2a1677c25dcc24669ce21eb6a6c`\n- `Linux 6.18`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}