Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2026-43395

23
FAUCET Score

In the Linux kernel, the following vulnerability has been resolved: drm/xe/sync: Cleanup partially initialized sync on parse failure xe_sync_entry_parse() can allocate references (syncobj, fence, chain fence, or user fence) before hitting a later failure path. Several of those paths returned directly, leaving partially initialized state and leaking refs. Route these error paths through a common free_sync label and call xe_sync_entry_cleanup(sync) before returning the error. (cherry picked from commit f939bdd9207a5d1fc55cced5459858480686ce22)

First published: May 8, 2026Last modified: May 11, 2026

Impacted Technologies

VendorProductVersion(s)CPE
>= 6.8, < 6.12.78CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.13, < 6.18.19CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.19, < 6.19.9CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
7.0CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

5.5MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.12%
Probability of exploitation in next 30 days
EPSS Percentile
2.3%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0012 is in the 15th percentile among its peer group of 15,940 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (22)

ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-6.8 (jammy)Fixed in: 6.8.0-1064.72~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime-6.8 (jammy)Fixed in: 6.8.1-1056.57~22.04.2
ubuntupatch availablevia ubuntu_usn
Product: linux (noble)Fixed in: 6.8.0-136.136
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp (noble)Fixed in: 6.8.0-1064.72
ubuntupatch availablevia ubuntu_usn
Product: linux-gke (noble)Fixed in: 6.8.0-1059.67
ubuntupatch availablevia ubuntu_usn
Product: linux-gkeop (noble)Fixed in: 6.8.0-1046.50
ubuntupatch availablevia ubuntu_usn
Product: linux-realtime (noble)Fixed in: 6.8.1-1056.57
ubuntupatch availablevia ubuntu_usn
Product: linux-gcp-fips (noble)Fixed in: 6.8.0-1064.72+fips1
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-6.8 (jammy)Fixed in: 6.8.0-1059.62~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia (noble)Fixed in: 6.8.0-1059.62
ubuntupatch availablevia ubuntu_usn
Product: linux-nvidia-lowlatency (noble)Fixed in: 6.8.0-1059.62.1
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle-6.8 (jammy)Fixed in: 6.8.0-1058.61~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency-hwe-6.8 (jammy)Fixed in: 6.8.0-136.136.2~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-fips (noble)Fixed in: 6.8.0-136.136+fips2
ubuntupatch availablevia ubuntu_usn
Product: linux-lowlatency (noble)Fixed in: 6.8.0-136.136.2
ubuntupatch availablevia ubuntu_usn
Product: linux-oracle (noble)Fixed in: 6.8.0-1058.61
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fde-6.8 (jammy)Fixed in: 6.8.0-1062.69~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fips (noble)Fixed in: 6.8.0-1063.71+fips2
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-fde (noble)Fixed in: 6.8.0-1062.69
ubuntupatch availablevia ubuntu_usn
Product: linux-azure-6.8 (jammy)Fixed in: 6.8.0-1063.71~22.04.1
ubuntupatch availablevia ubuntu_usn
Product: linux-azure (noble)Fixed in: 6.8.0-1063.71
ubuntupatch availablevia ubuntu_usn
Product: linux-aws (noble)Fixed in: 6.8.0-1061.64

Vendor Advisories (10)

ubuntuUSN-8609-1

Linux kernel (Azure CVM) vulnerabilities

Jul 24, 2026
ubuntuUSN-8608-1

Linux kernel (Azure FIPS) vulnerabilities

Jul 24, 2026
ubuntuUSN-8607-1

Linux kernel (Azure CVM) vulnerabilities

Jul 24, 2026
ubuntuUSN-8606-1

Linux kernel (Azure) vulnerabilities

Jul 24, 2026
ubuntuUSN-8595-2

Linux kernel (AWS) vulnerabilities

Jul 24, 2026
ubuntuUSN-8596-1

Linux kernel (NVIDIA) vulnerabilities

Jul 23, 2026
ubuntuUSN-8595-1

Linux kernel (Oracle) vulnerabilities

Jul 23, 2026
ubuntuUSN-8574-2

Linux kernel vulnerabilities

Jul 23, 2026
ubuntuUSN-8574-1

Linux kernel (GCP FIPS) vulnerabilities

Jul 21, 2026
ubuntuUSN-8567-1

Linux kernel vulnerabilities

Jul 20, 2026

References

git.kernel.org / stable/c/1bfd7575092420ba5a0b944953c95b74a5646ff8
Patch
git.kernel.org / stable/c/91c228f96fcfacc2341a58815b1da8c69da94ebb
Patch
git.kernel.org / stable/c/af65cd1853599394b94201c08bed7a46717db478
Patch
git.kernel.org / stable/c/f0af63ffa06306f12592cd3919fad6957b425e1b
Patch