CVE-2026-43463

Source
https://cve.org/CVERecord?id=CVE-2026-43463
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43463.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-43463
Downstream
BELL (1)
CGA (5)
DEBIAN (1)
ROOT (2)
UBUNTU (1)
Published
2026-05-08T14:22:25Z
Modified
2026-11-08T02:30:27Z
Summary
rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer()
Details

In the Linux kernel, the following vulnerability has been resolved:

rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer()

rxrpc_kernel_lookup_peer() can also return error pointers in addition to NULL, so just checking for NULL is not sufficient.

Fix this by:

(1) Changing rxrpc_kernel_lookup_peer() to return -ENOMEM rather than NULL on allocation failure.

(2) Making the callers in afs use IS_ERR() and PTR_ERR() to pass on the error code returned.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43463.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
72904d7b9bfbf2dd146254edea93958bc35bbbfe
Fixed
d854c93b12f2076c564f595b41b93b02fd42a0f9
Fixed
d55fa7cd4b19ba91b34b307d769c149e56ad0a75
Fixed
54331c5dcc6d97683d7ca2788e7ef9c9505e1477
Fixed
4245a79003adf30e67f8e9060915bd05cb31d142
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6.7.3
Fixed
6.8
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
056fc740be000d39a7dba700a935f3bbfbc664e6

Affected versions

v6.*
v6.7.10
v6.7.11
v6.7.12
v6.7.3
v6.7.4
v6.7.5
v6.7.6
v6.7.7
v6.7.8
v6.7.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43463.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.8.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.19
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
6.19.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43463.json"