{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"d854c93b12f2076c564f595b41b93b02fd42a0f9","status":"affected","version":"72904d7b9bfbf2dd146254edea93958bc35bbbfe","versionType":"git"},{"lessThan":"d55fa7cd4b19ba91b34b307d769c149e56ad0a75","status":"affected","version":"72904d7b9bfbf2dd146254edea93958bc35bbbfe","versionType":"git"},{"lessThan":"54331c5dcc6d97683d7ca2788e7ef9c9505e1477","status":"affected","version":"72904d7b9bfbf2dd146254edea93958bc35bbbfe","versionType":"git"},{"lessThan":"4245a79003adf30e67f8e9060915bd05cb31d142","status":"affected","version":"72904d7b9bfbf2dd146254edea93958bc35bbbfe","versionType":"git"},{"status":"affected","version":"056fc740be000d39a7dba700a935f3bbfbc664e6","versionType":"git"},{"lessThan":"6.8","status":"affected","version":"6.7.3","versionType":"semver"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"6.8"},{"lessThan":"6.8","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.114","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.19","versionType":"semver"},{"lessThanOrEqual":"6.19.*","status":"unaffected","version":"6.19.9","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.0","versionType":"original_commit_for_fix"}]}],"cveId":"CVE-2026-43463","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nrxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer()\n\nrxrpc_kernel_lookup_peer() can also return error pointers in addition to\nNULL, so just checking for NULL is not sufficient.\n\nFix this by:\n\n (1) Changing rxrpc_kernel_lookup_peer() to return -ENOMEM rather than NULL\n     on allocation failure.\n\n (2) Making the callers in afs use IS_ERR() and PTR_ERR() to pass on the\n     error code returned.","epss":{"date":"2026-11-06","percentile":0.01488,"score":0.00114},"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793979775893,"publishedAt":1778250145346,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/d854c93b12f2076c564f595b41b93b02fd42a0f9"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/d55fa7cd4b19ba91b34b307d769c149e56ad0a75"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/54331c5dcc6d97683d7ca2788e7ef9c9505e1477"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/4245a79003adf30e67f8e9060915bd05cb31d142"}],"remediation":[],"revision":"293b78624cc59b25bf442af1cb2cf1e1a06619d2c48b28f59a50f5245a868936","sources":[{"modifiedAt":1793979775893,"name":"CNA: Linux","retrievedAt":1793981719899,"url":"https://www.cve.org/CVERecord?id=CVE-2026-43463"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793981730491,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-43463"}],"ssvc":{"assessedAt":1793979567146,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer()","updatedAt":1793981730491}