---
id: CVE-2026-43168
title: 'ocfs2: fix reflink preserve cleanup issue'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ocfs2: fix reflink preserve cleanup issue

  commit c06c303832ec ("ocfs2: fix xattr array entry __counted_by error")
  doesn't handle all cases and the cleanup job for pres…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 <
    c44d86ca949cb1e5566ad14510cc26fa1a17e2d8
  - >-
    Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 <
    02acc9f72365e50eb45a56b7dacb9114ca3b503c
  - >-
    Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 <
    8ff329353134280b203cb2bce95311cb8f7cbd8a
  - >-
    Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 <
    bb273b68c1719c2925e05557f7e7099edb066680
  - >-
    Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 <
    b2952dbeac2c3c527cb0519d5ffaeb95b062466a
  - >-
    Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 <
    3bdc3766aafb052aef4baadef455a84c1c0a059d
  - >-
    Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 <
    2f4daccd9d9b8b2952df7878df8c2e8ba6439398
  - >-
    Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 <
    5138c936c2c82c9be8883921854bc6f7e1177d8c
  - Linux 2.6.32
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T15:30:14.532992Z'
published: '2026-05-06'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T15:32:35.022Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-43168'
references:
  - url: 'https://git.kernel.org/stable/c/c44d86ca949cb1e5566ad14510cc26fa1a17e2d8'
  - url: 'https://git.kernel.org/stable/c/02acc9f72365e50eb45a56b7dacb9114ca3b503c'
  - url: 'https://git.kernel.org/stable/c/8ff329353134280b203cb2bce95311cb8f7cbd8a'
  - url: 'https://git.kernel.org/stable/c/bb273b68c1719c2925e05557f7e7099edb066680'
  - url: 'https://git.kernel.org/stable/c/b2952dbeac2c3c527cb0519d5ffaeb95b062466a'
  - url: 'https://git.kernel.org/stable/c/3bdc3766aafb052aef4baadef455a84c1c0a059d'
  - url: 'https://git.kernel.org/stable/c/2f4daccd9d9b8b2952df7878df8c2e8ba6439398'
  - url: 'https://git.kernel.org/stable/c/5138c936c2c82c9be8883921854bc6f7e1177d8c'
tags:
  - cve.org
epss: 0.00123
epssPercentile: 0.02051
ingestedAt: '2026-11-06T15:54:04.014Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: fix reflink preserve cleanup issue

commit c06c303832ec ("ocfs2: fix xattr array entry __counted_by error")
doesn't handle all cases and the cleanup job for preserved xattr entries
still has bug:
- the 'last' pointer should be shifted by one unit after cleanup
  an array entry.
- current code logic doesn't cleanup the first entry when xh_count is 1.

Note, commit c06c303832ec is also a bug fix for 0fe9b66c65f3.

## Affected

- `Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 < c44d86ca949cb1e5566ad14510cc26fa1a17e2d8`
- `Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 < 02acc9f72365e50eb45a56b7dacb9114ca3b503c`
- `Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 < 8ff329353134280b203cb2bce95311cb8f7cbd8a`
- `Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 < bb273b68c1719c2925e05557f7e7099edb066680`
- `Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 < b2952dbeac2c3c527cb0519d5ffaeb95b062466a`
- `Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 < 3bdc3766aafb052aef4baadef455a84c1c0a059d`
- `Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 < 2f4daccd9d9b8b2952df7878df8c2e8ba6439398`
- `Linux >= 0fe9b66c65f3ff227da45381afe7612f91e32740 < 5138c936c2c82c9be8883921854bc6f7e1177d8c`
- `Linux 2.6.32`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.