Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-43396 Details

Description

In the Linux kernel, the following vulnerability has been resolved: drm/xe/sync: Fix user fence leak on alloc failure When dma_fence_chain_alloc() fails, properly release the user fence reference to prevent a memory leak. (cherry picked from commit a5d5634cde48a9fcd68c8504aa07f89f175074a0)

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:5.5 MEDIUMVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/05edc78eb4699e8e000a62aaa8dace50a17e19e3 kernel.orgPatch
https://git.kernel.org/stable/c/0879c3f04f67e2a1677c25dcc24669ce21eb6a6c kernel.orgPatch
https://git.kernel.org/stable/c/f8f90b33934b307f6e4599b9fae38aa1ee5441a7 kernel.orgPatch

Weakness Enumeration

CWE-IDCWE NameSource
CWE-401Missing Release of Memory after Effective Lifetime[email protected]

Affected Products

ProductVersions
linux linux kernel
>= 6.18.1, < 6.18.20
>= 6.19, < 6.19.9
6.18 -
6.18 rc5
6.18 rc6

CPE

  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.18:-:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.18:rc5:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.18:rc6:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:6.18:rc7:*:*:*:*:*:*
  • cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

3 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-43396
NVD Published Date:
May 8, 2026
NVD Last Modified:
Jun 17, 2026
Source:
kernel.org
CVE-2026-43396 Details - Not Deferred