---
id: CVE-2026-43396
title: 'drm/xe/sync: Fix user fence leak on alloc failure'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/xe/sync: Fix user fence leak on alloc failure

  When dma_fence_chain_alloc() fails, properly release the user fence
  reference to prevent a memory leak.

  (cherry pick…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 0995c2fc39b0f998d40f5d276f67ae22fc1c37c3 <
    05edc78eb4699e8e000a62aaa8dace50a17e19e3
  - >-
    Linux >= 0995c2fc39b0f998d40f5d276f67ae22fc1c37c3 <
    f8f90b33934b307f6e4599b9fae38aa1ee5441a7
  - >-
    Linux >= 0995c2fc39b0f998d40f5d276f67ae22fc1c37c3 <
    0879c3f04f67e2a1677c25dcc24669ce21eb6a6c
  - Linux 6.18
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T15:37:05.170740Z'
published: '2026-05-08'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T15:42:51.369Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-43396'
references:
  - url: 'https://git.kernel.org/stable/c/05edc78eb4699e8e000a62aaa8dace50a17e19e3'
  - url: 'https://git.kernel.org/stable/c/f8f90b33934b307f6e4599b9fae38aa1ee5441a7'
  - url: 'https://git.kernel.org/stable/c/0879c3f04f67e2a1677c25dcc24669ce21eb6a6c'
tags:
  - cve.org
epss: 0.00121
epssPercentile: 0.01898
ingestedAt: '2026-11-06T15:54:03.927Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/xe/sync: Fix user fence leak on alloc failure

When dma_fence_chain_alloc() fails, properly release the user fence
reference to prevent a memory leak.

(cherry picked from commit a5d5634cde48a9fcd68c8504aa07f89f175074a0)

## Affected

- `Linux >= 0995c2fc39b0f998d40f5d276f67ae22fc1c37c3 < 05edc78eb4699e8e000a62aaa8dace50a17e19e3`
- `Linux >= 0995c2fc39b0f998d40f5d276f67ae22fc1c37c3 < f8f90b33934b307f6e4599b9fae38aa1ee5441a7`
- `Linux >= 0995c2fc39b0f998d40f5d276f67ae22fc1c37c3 < 0879c3f04f67e2a1677c25dcc24669ce21eb6a6c`
- `Linux 6.18`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.