{"id":"CVE-2026-43168","title":"ocfs2: fix reflink preserve cleanup issue","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix reflink preserve cleanup issue\n\ncommit c06c303832ec (\"ocfs2: fix xattr array entry __counted_by error\")\ndoesn't handle all cases and the cleanup job for pres…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 < c44d86ca949cb1e5566ad14510cc26fa1a17e2d8","Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 < 02acc9f72365e50eb45a56b7dacb9114ca3b503c","Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 < 8ff329353134280b203cb2bce95311cb8f7cbd8a","Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 < bb273b68c1719c2925e05557f7e7099edb066680","Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 < b2952dbeac2c3c527cb0519d5ffaeb95b062466a","Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 < 3bdc3766aafb052aef4baadef455a84c1c0a059d","Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 < 2f4daccd9d9b8b2952df7878df8c2e8ba6439398","Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 < 5138c936c2c82c9be8883921854bc6f7e1177d8c","Linux 2.6.32"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T15:30:14.532992Z"},"published":"2026-05-06","updated":"2026-11-06","sourceUpdated":"2026-11-06T15:32:35.022Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-43168","references":[{"url":"https://git.kernel.org/stable/c/c44d86ca949cb1e5566ad14510cc26fa1a17e2d8"},{"url":"https://git.kernel.org/stable/c/02acc9f72365e50eb45a56b7dacb9114ca3b503c"},{"url":"https://git.kernel.org/stable/c/8ff329353134280b203cb2bce95311cb8f7cbd8a"},{"url":"https://git.kernel.org/stable/c/bb273b68c1719c2925e05557f7e7099edb066680"},{"url":"https://git.kernel.org/stable/c/b2952dbeac2c3c527cb0519d5ffaeb95b062466a"},{"url":"https://git.kernel.org/stable/c/3bdc3766aafb052aef4baadef455a84c1c0a059d"},{"url":"https://git.kernel.org/stable/c/2f4daccd9d9b8b2952df7878df8c2e8ba6439398"},{"url":"https://git.kernel.org/stable/c/5138c936c2c82c9be8883921854bc6f7e1177d8c"}],"tags":["cve.org"],"epss":0.00123,"epssPercentile":0.02051,"ingestedAt":"2026-11-06T15:54:04.014Z","slug":"CVE-2026-43168","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix reflink preserve cleanup issue\n\ncommit c06c303832ec (\"ocfs2: fix xattr array entry __counted_by error\")\ndoesn't handle all cases and the cleanup job for preserved xattr entries\nstill has bug:\n- the 'last' pointer should be shifted by one unit after cleanup\n  an array entry.\n- current code logic doesn't cleanup the first entry when xh_count is 1.\n\nNote, commit c06c303832ec is also a bug fix for 0fe9b66c65f3.\n\n## Affected\n\n- `Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 < c44d86ca949cb1e5566ad14510cc26fa1a17e2d8`\n- `Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 < 02acc9f72365e50eb45a56b7dacb9114ca3b503c`\n- `Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 < 8ff329353134280b203cb2bce95311cb8f7cbd8a`\n- `Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 < bb273b68c1719c2925e05557f7e7099edb066680`\n- `Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 < b2952dbeac2c3c527cb0519d5ffaeb95b062466a`\n- `Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 < 3bdc3766aafb052aef4baadef455a84c1c0a059d`\n- `Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 < 2f4daccd9d9b8b2952df7878df8c2e8ba6439398`\n- `Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 < 5138c936c2c82c9be8883921854bc6f7e1177d8c`\n- `Linux 2.6.32`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}