CVE-2026-43463

MediumCVSS 5.5/10Last modified Nov 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer()

rxrpc_kernel_lookup_peer() can also return error pointers in addition to NULL, so just checking for NULL is not sufficient.

Fix this by:

(1) Changing rxrpc_kernel_lookup_peer() to return -ENOMEM rather than NULL on allocation failure.

(2) Making the callers in afs use IS_ERR() and PTR_ERR() to pass on the error code returned.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 72904d7b9bfbf2dd146254edea93958bc35bbbfe, < d854c93b12f2076c564f595b41b93b02fd42a0f9; >= 72904d7b9bfbf2dd146254edea93958bc35bbbfe, < d55fa7cd4b19ba91b34b307d769c149e56ad0a75; >= 72904d7b9bfbf2dd146254edea93958bc35bbbfe, < 54331c5dcc6d97683d7ca2788e7ef9c9505e1477; >= 72904d7b9bfbf2dd146254edea93958bc35bbbfe, < 4245a79003adf30e67f8e9060915bd05cb31d142; 056fc740be000d39a7dba700a935f3bbfbc664e6; >= 6.7.3, < 6.8
LinuxLinux6.8

References

Timeline

Published
May 8, 2026
Last modified
Nov 11, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-434647.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ XDP multiCVE-2026-434659.8In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ XDP mulCVE-2026-434668.2In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery In case of a TCVE-2026-434675.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix crash when moving to switchdev mode When moving to switcCVE-2026-434685.5In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix deadlock between devlink lock and esw->wq esw->work_queuCVE-2026-434697.5In the Linux kernel, the following vulnerability has been resolved: xprtrdma: Decrement re_receiving on the early exit paths In the event CVE-2026-43478.1The MW WP Form plugin for WordPress is vulnerable to arbitrary file moving due to insufficient file path validation via the 'generate_user_fCVE-2026-434705.5In the Linux kernel, the following vulnerability has been resolved: nfs: return EISDIR on nfs3_proc_create if d_alias is a dir If we foundCVE-2026-434715.5In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_coCVE-2026-434725.5In the Linux kernel, the following vulnerability has been resolved: unshare: fix unshare_fs() handling There's an unpleasant corner case iCVE-2026-434735.5In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Add NULL checks when resetting request and reply queues CVE-2026-434745.5In the Linux kernel, the following vulnerability has been resolved: fs: init flags_valid before calling vfs_fileattr_get syzbot reported a
CVE-2026-43463: Medium severity, CVSS 5.5 | Vulnix