Riskcovery

CVE-2026-43168

ocfs2: fix reflink preserve cleanup issue

State
Published
Severity
Not scored
Published
May 6, 2026
Updated
May 11, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: fix reflink preserve cleanup issue

commit c06c303832ec ("ocfs2: fix xattr array entry __counted_by error") doesn't handle all cases and the cleanup job for preserved xattr entries still has bug: - the 'last' pointer should be shifted by one unit after cleanup an array entry. - current code logic doesn't cleanup the first entry when xh_count is 1.

Note, commit c06c303832ec is also a bug fix for 0fe9b66c65f3.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0fe9b66c65f3ff227da45381afe7612f91e32740 to before c44d86ca949cb1e5566ad14510cc26fa1a17e2d8Affected
  • 0fe9b66c65f3ff227da45381afe7612f91e32740 to before 02acc9f72365e50eb45a56b7dacb9114ca3b503cAffected
  • 0fe9b66c65f3ff227da45381afe7612f91e32740 to before 8ff329353134280b203cb2bce95311cb8f7cbd8aAffected
  • 0fe9b66c65f3ff227da45381afe7612f91e32740 to before bb273b68c1719c2925e05557f7e7099edb066680Affected
  • 0fe9b66c65f3ff227da45381afe7612f91e32740 to before b2952dbeac2c3c527cb0519d5ffaeb95b062466aAffected
  • 0fe9b66c65f3ff227da45381afe7612f91e32740 to before 3bdc3766aafb052aef4baadef455a84c1c0a059dAffected
  • 0fe9b66c65f3ff227da45381afe7612f91e32740 to before 2f4daccd9d9b8b2952df7878df8c2e8ba6439398Affected
  • 0fe9b66c65f3ff227da45381afe7612f91e32740 to before 5138c936c2c82c9be8883921854bc6f7e1177d8cAffected
LinuxLinux
  • 2.6.32Affected
  • before 2.6.32Not affected
  • 5.10.252 through 5.10.*Not affected
  • 5.15.202 through 5.15.*Not affected
  • 6.1.165 through 6.1.*Not affected
  • 6.6.128 through 6.6.*Not affected
  • 6.12.75 through 6.12.*Not affected
  • 6.18.16 through 6.18.*Not affected
  • 6.19.6 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.