CVE-2026-43463: rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer()

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-05-08 · updated 2026-10-21
Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer() rxrpc_kernel_lookup_peer() can also return error pointers in addition to NULL, so just checking for NULL is not sufficient. Fix this by: (1) Changing rxrpc_kernel_lookup_peer() to return -ENOMEM rather than NULL on allocation failure. (2) Making the callers in afs use IS_ERR() and PTR_ERR() to pass on the error code returned.

Affected products

Linux kernel: from 6.7.3 before 6.8; from 6.8 before 6.18.19; from 6.19 before 6.19.9; 7.0-rc1, 7.0-rc2, 7.0-rc3 — fixed in 6.18.19, 6.19.9, 6.8

How to fix

Upgrade to a fixed version: Linux kernel 6.18.19, 6.19.9, 6.8. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-43463 or the next vulnerability affects your stack