CVE-2026-43463: rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer()
In the Linux kernel, the following vulnerability has been resolved:
rxrpc, afs: Fix missing error pointer check after rxrpckernellookuppeer()
rxrpckernellookuppeer() can also return error pointers in addition to NULL, so just checking for NULL is not sufficient.
Fix this by:
(1) Changing rxrpckernellookuppeer() to return -ENOMEM rather than NULL on allocation failure.
(2) Making the callers in afs use ISERR() and PTRERR() to pass on the error code returned.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43463?
The severity of CVE-2026-43463 is currently categorized as moderate due to the potential for a denial-of-service attack.
How do I fix CVE-2026-43463?
To fix CVE-2026-43463, update your Linux kernel to the latest version where the vulnerability has been addressed.
What is the impact of CVE-2026-43463 on affected systems?
CVE-2026-43463 can lead to a denial-of-service condition by causing kernel panic if the error pointer is not checked properly.
Which versions of the Linux kernel are affected by CVE-2026-43463?
CVE-2026-43463 affects certain versions of the Linux kernel prior to the fixes being implemented in newer releases.
Is CVE-2026-43463 a remote or local vulnerability?
CVE-2026-43463 is primarily considered a local vulnerability, as it requires local system access for exploitation.