PT-2026-39124 · Linux · Linux Kernel

Published 2026-05-08 · Updated 2026-05-08 · CVE-2026-43463

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the rxrpc and afs components where the rxrpc kernel lookup peer() function can return error pointers. The system previously only checked for NULL values, which was insufficient to handle these error pointers correctly.

Recommendations Update the Linux kernel to a version where rxrpc kernel lookup peer() returns -ENOMEM on allocation failure and callers in afs utilize IS ERR() and PTR ERR() to handle the returned error codes.

Related Identifiers

CVE-2026-43463

Affected Products

Linux Kernel

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-43463 · Security Note
• https://git.kernel.org/stable/c/54331c5dcc6d97683d7ca2788e7ef9c9505e1477 · Note
• https://twitter.com/CVEnew/status/2052767599830917472 · Twitter Post
• https://git.kernel.org/stable/c/d55fa7cd4b19ba91b34b307d769c149e56ad0a75 · Note
• https://git.kernel.org/stable/c/4245a79003adf30e67f8e9060915bd05cb31d142 · Note