{"id":"CVE-2026-43463","title":"rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nrxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer()\n\nrxrpc_kernel_lookup_peer() can also return error pointers in addition to\nNULL, so just che…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 72904d7b9bfbf2dd146254edea93958bc35bbbfe < d854c93b12f2076c564f595b41b93b02fd42a0f9","Linux >= 72904d7b9bfbf2dd146254edea93958bc35bbbfe < d55fa7cd4b19ba91b34b307d769c149e56ad0a75","Linux >= 72904d7b9bfbf2dd146254edea93958bc35bbbfe < 54331c5dcc6d97683d7ca2788e7ef9c9505e1477","Linux >= 72904d7b9bfbf2dd146254edea93958bc35bbbfe < 4245a79003adf30e67f8e9060915bd05cb31d142","Linux 056fc740be000d39a7dba700a935f3bbfbc664e6","Linux >= 6.7.3 < 6.8","Linux 6.8"],"published":"2026-05-08","updated":"2026-10-21","sourceUpdated":"2026-10-21T12:40:48.202Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-43463","references":[{"url":"https://git.kernel.org/stable/c/d854c93b12f2076c564f595b41b93b02fd42a0f9"},{"url":"https://git.kernel.org/stable/c/d55fa7cd4b19ba91b34b307d769c149e56ad0a75"},{"url":"https://git.kernel.org/stable/c/54331c5dcc6d97683d7ca2788e7ef9c9505e1477"},{"url":"https://git.kernel.org/stable/c/4245a79003adf30e67f8e9060915bd05cb31d142"}],"tags":["cve.org"],"epss":0.0016,"epssPercentile":0.0477,"ingestedAt":"2026-10-21T12:48:53.638Z","slug":"CVE-2026-43463","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nrxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer()\n\nrxrpc_kernel_lookup_peer() can also return error pointers in addition to\nNULL, so just checking for NULL is not sufficient.\n\nFix this by:\n\n (1) Changing rxrpc_kernel_lookup_peer() to return -ENOMEM rather than NULL\n     on allocation failure.\n\n (2) Making the callers in afs use IS_ERR() and PTR_ERR() to pass on the\n     error code returned.\n\n## Affected\n\n- `Linux >= 72904d7b9bfbf2dd146254edea93958bc35bbbfe < d854c93b12f2076c564f595b41b93b02fd42a0f9`\n- `Linux >= 72904d7b9bfbf2dd146254edea93958bc35bbbfe < d55fa7cd4b19ba91b34b307d769c149e56ad0a75`\n- `Linux >= 72904d7b9bfbf2dd146254edea93958bc35bbbfe < 54331c5dcc6d97683d7ca2788e7ef9c9505e1477`\n- `Linux >= 72904d7b9bfbf2dd146254edea93958bc35bbbfe < 4245a79003adf30e67f8e9060915bd05cb31d142`\n- `Linux 056fc740be000d39a7dba700a935f3bbfbc664e6`\n- `Linux >= 6.7.3 < 6.8`\n- `Linux 6.8`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}