CVE-2026-43463

Source
https://cve.org/CVERecord?id=CVE-2026-43463
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43463.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-43463
Downstream
BELL (1)
CGA (5)
DEBIAN (1)
ROOT (2)
UBUNTU (1)
Published
2026-05-08T14:22:25Z
Modified
2026-10-08T02:51:23Z
Summary
rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer()
Details

In the Linux kernel, the following vulnerability has been resolved:

rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer()

rxrpc_kernel_lookup_peer() can also return error pointers in addition to NULL, so just checking for NULL is not sufficient.

Fix this by:

(1) Changing rxrpc_kernel_lookup_peer() to return -ENOMEM rather than NULL on allocation failure.

(2) Making the callers in afs use IS_ERR() and PTR_ERR() to pass on the error code returned.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43463.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
72904d7b9bfbf2dd146254edea93958bc35bbbfe
Fixed
d55fa7cd4b19ba91b34b307d769c149e56ad0a75
Fixed
54331c5dcc6d97683d7ca2788e7ef9c9505e1477
Fixed
4245a79003adf30e67f8e9060915bd05cb31d142
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.7.3
Fixed
6.8
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
056fc740be000d39a7dba700a935f3bbfbc664e6

Affected versions

v6.*
v6.7.10
v6.7.11
v6.7.12
v6.7.3
v6.7.4
v6.7.5
v6.7.6
v6.7.7
v6.7.8
v6.7.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43463.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.8.0
Fixed
6.18.19
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
6.19.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43463.json"