CVE-2026-43395 Linux CVE debrief

Who should care

Linux kernel maintainers, distro security teams, and operators running affected kernel branches—especially systems using the Xe DRM driver path or multi-user desktops/workstations where local users can exercise kernel interfaces.

Technical summary

The supplied kernel commit message says xe_sync_entry_parse() may allocate references such as a syncobj, fence, chain fence, or user fence before hitting later parse failures. Some error paths returned directly instead of cleaning up, which could leak references and leave partially initialized sync state. The resolution is to route those failures through a common free_sync label and call xe_sync_entry_cleanup(sync) before returning. NVD classifies the weakness as CWE-459 (Incomplete Cleanup) and rates the impact as local, low-privilege, no-user-interaction availability loss (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Defensive priority

Medium. The issue is locally reachable and affects availability rather than confidentiality or integrity, but it is still kernel-level and can accumulate resource leaks. Prioritize patching on systems that expose the Xe DRM path or that rely on stable kernel branches listed by NVD.

Recommended defensive actions

• Apply the vendor or distro kernel update that includes the cleanup fix.
• If you track upstream fixes, verify that your branch includes the patch associated with the supplied kernel stable references.
• Prioritize remediation for affected ranges listed by NVD: Linux kernel 6.8 through before 6.12.78, 6.13 through before 6.18.19, 6.19 through before 6.19.9, and 7.0-rc1.
• After updating, confirm the running kernel version matches a fixed build from your vendor or backport stream.
• Monitor affected hosts for unexplained kernel resource growth or instability until patching is complete.

Evidence notes

The CVE description states that xe_sync_entry_parse() could allocate sync-related references and then return from later failure paths without cleanup, causing leaked refs. The supplied NVD record lists CWE-459 and a CVSS vector of AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, which supports a local availability-only impact. NVD also provides affected kernel version ranges and four official kernel patch references.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.