Riskcovery

CVE-2026-43463

rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer()

State
Published
Severity
Not scored
Published
May 8, 2026
Updated
Oct 21, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer()

rxrpc_kernel_lookup_peer() can also return error pointers in addition to NULL, so just checking for NULL is not sufficient.

Fix this by:

(1) Changing rxrpc_kernel_lookup_peer() to return -ENOMEM rather than NULL on allocation failure.

(2) Making the callers in afs use IS_ERR() and PTR_ERR() to pass on the error code returned.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 72904d7b9bfbf2dd146254edea93958bc35bbbfe to before d854c93b12f2076c564f595b41b93b02fd42a0f9Affected
  • 72904d7b9bfbf2dd146254edea93958bc35bbbfe to before d55fa7cd4b19ba91b34b307d769c149e56ad0a75Affected
  • 72904d7b9bfbf2dd146254edea93958bc35bbbfe to before 54331c5dcc6d97683d7ca2788e7ef9c9505e1477Affected
  • 72904d7b9bfbf2dd146254edea93958bc35bbbfe to before 4245a79003adf30e67f8e9060915bd05cb31d142Affected
  • 056fc740be000d39a7dba700a935f3bbfbc664e6Affected
  • 6.7.3 to before 6.8Affected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.19 through 6.18.*Not affected
  • 6.19.9 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.