CVE-2026-43463

Summary: Multiple sources confirm a Linux kernel vulnerability in rxrpc and afs where rxrpc_kernel_lookup_peer() could return error pointers in addition to NULL, risking instability. The fix changes rxrpc_kernel_lookup_peer() to return -ENOMEM on allocation failure (instead of NULL) and updates c...

CVE-2026-43463 rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer()

In the Linux kernel, the following vulnerability has been resolved: rxrpc, afs: Fix missing error pointer check after rxrpckernellookuppeer rxrpckernellookuppeer can also return error pointers in addition to NULL, so just checking for NULL is not sufficient. Fix this by: 1 Changing...

CVE-2026-43463 rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer()

In the Linux kernel, the following vulnerability has been resolved: rxrpc, afs: Fix missing error pointer check after rxrpckernellookuppeer rxrpckernellookuppeer can also return error pointers in addition to NULL, so just checking for NULL is not sufficient. Fix this by: 1 Changing...

CVE-2026-43463

In the Linux kernel, the following vulnerability has been resolved: rxrpc, afs: Fix missing error pointer check after rxrpckernellookuppeer rxrpckernellookuppeer can also return error pointers in addition to NULL, so just checking for NULL is not sufficient. Fix this by: 1 Changing...

DirtyFrag Local Privilege Escalation

Exploits the 'DirtyFrag' AFALG/rxrpc page cache corruption vulnerability to achieve local privilege escalation. This module compiles a C exploit, uploads it to the target, and executes it to gain root via /usr/bin/su or /etc/passwd corruption. from kittysploit import from core.framework.post impo...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: rxrpc: The issue related to irqdisabled in localbhenable has been fixed. The rxrpcassessMTUsize function calls down into the IP layer to determine the MTU size for a route. When accepting an incoming call, this function is called...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: rxrpc: Fixed handling of unaligned crypto lengths in packets. Fixed the handling of packets with misaligned crypto lengths. Also, handled non-ENOMEM errors during decryption by aborting the process. Additionally, removed the...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: - rxrpc: rxrpcverifydata ensures that the rxdecbuffer is allocated. - rxrpcrecvmsgdata calls rxrpcverifydata whenever the rxrpccall.rxdecbuffer is not allocated. It assumes that upon a successful return, the rxdecbuffer must b...

dirtyfrag-check

dirtyfrag-check A safe, read-only Python script to detect whe...

Linux Kernel Dirty Frag LPE Exploit Enables Root Access Across Major Distributions

Details have emerged about a new, unpatched local privilege escalation LPE vulnerability impacting the Linux kernel. Dubbed Dirty Frag , it has been described as a successor to Copy Fail CVE-2026-31431, CVSS score: 7.8, a recently disclosed LPE flaw impacting the Linux kernel that has since come...

PT-2026-46291

Miscellaneous Ubuntu changes - Packaging: add tuxcare suffix Miscellaneous upstream changes - xfrm: esp: avoid in-place decrypt on shared skb frags - rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present...

PT-2026-45339

rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present - xfrm: esp: avoid in-place decrypt on shared skb frags...

CVE-2026-43463: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: rxrpc, afs: Fix missing error pointer check after rxrpckernellookuppeer rxrpckernellookuppeer can also return error pointers in addition to NULL, so just checking for NULL is not sufficient. Fix this by: 1 Changing...

PT-2026-39124

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the rxrpc and afs components where the rxrpc kernel lookup peer function can return error pointers in addition to NULL. The system failed to properly check for these...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the rxrpckernellookuppeer function in the rxrpc AFS component. This function may return an...

Linux Distros Unpatched Vulnerability : CVE-2026-43463

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rxrpc, afs: Fix missing error pointer check after rxrpckernellookuppeer rxrpckernellookuppeer can also return error pointers in addition to NULL, so just checki...

dirtyfrag

Dirty Frag: Universal Linux LPE Abstract !tuxasse...

Linux Distros Unpatched Vulnerability : CVE-2026-31696

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rxrpc: Fix missing validation of ticket length in non-XDR key preparsing In rxrpcpreparse, there are two paths for parsing key payloads: the XDR path for large...

CVE-2026-31696

A flaw was found in the Linux kernel's rxrpc component. An unprivileged user can exploit this by providing an excessively large ticket length during key preparsing. This improper validation leads to an oversized token calculation when the key is subsequently read, triggering a system warning and...

AZL-85433 CVE-2026-31696 affecting package kernel for versions less than 6.6.137.1-2

In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fix missing validation of ticket length in non-XDR key preparsing In rxrpcpreparse, there are two paths for parsing key payloads: the XDR path for large payloads and the non-XDR path for payloads = 28 bytes. While the XDR...