Memory Allocation Flaw in Linux Kernel Affects AFS Protocol Handling

CVE-2026-43463

What is CVE-2026-43463?

A vulnerability in the Linux Kernel's handling of the AFS protocol has been identified where the function rxrpc_kernel_lookup_peer() could return error pointers. This issue arises from insufficient error checking after memory allocation, as it previously checked only for NULL, which is inadequate. The fix involves changing the behavior of rxrpc_kernel_lookup_peer() to return an appropriate error code (-ENOMEM) on allocation failures and ensuring that its callers utilize IS_ERR() and PTR_ERR() to handle these errors correctly.

References