CVE-2026-43168

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-43168", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-05-01T14:12:55.990Z", "datePublished": "2026-05-06T11:27:44.570Z", "dateUpdated": "2026-11-06T15:32:35.022Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-11T22:19:06.078Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix reflink preserve cleanup issue\n\ncommit c06c303832ec (\"ocfs2: fix xattr array entry __counted_by error\")\ndoesn't handle all cases and the cleanup job for preserved xattr entries\nstill has bug:\n- the 'last' pointer should be shifted by one unit after cleanup\n an array entry.\n- current code logic doesn't cleanup the first entry when xh_count is 1.\n\nNote, commit c06c303832ec is also a bug fix for 0fe9b66c65f3."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/ocfs2/xattr.c"], "versions": [{"version": "0fe9b66c65f3ff227da45381afe7612f91e32740", "lessThan": "c44d86ca949cb1e5566ad14510cc26fa1a17e2d8", "status": "affected", "versionType": "git"}, {"version": "0fe9b66c65f3ff227da45381afe7612f91e32740", "lessThan": "02acc9f72365e50eb45a56b7dacb9114ca3b503c", "status": "affected", "versionType": "git"}, {"version": "0fe9b66c65f3ff227da45381afe7612f91e32740", "lessThan": "8ff329353134280b203cb2bce95311cb8f7cbd8a", "status": "affected", "versionType": "git"}, {"version": "0fe9b66c65f3ff227da45381afe7612f91e32740", "lessThan": "bb273b68c1719c2925e05557f7e7099edb066680", "status": "affected", "versionType": "git"}, {"version": "0fe9b66c65f3ff227da45381afe7612f91e32740", "lessThan": "b2952dbeac2c3c527cb0519d5ffaeb95b062466a", "status": "affected", "versionType": "git"}, {"version": "0fe9b66c65f3ff227da45381afe7612f91e32740", "lessThan": "3bdc3766aafb052aef4baadef455a84c1c0a059d", "status": "affected", "versionType": "git"}, {"version": "0fe9b66c65f3ff227da45381afe7612f91e32740", "lessThan": "2f4daccd9d9b8b2952df7878df8c2e8ba6439398", "status": "affected", "versionType": "git"}, {"version": "0fe9b66c65f3ff227da45381afe7612f91e32740", "lessThan": "5138c936c2c82c9be8883921854bc6f7e1177d8c", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/ocfs2/xattr.c"], "versions": [{"version": "2.6.32", "status": "affected"}, {"version": "0", "lessThan": "2.6.32", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.252", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.202", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.165", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.128", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.75", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.16", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.19.6", "lessThanOrEqual": "6.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.32", "versionEndExcluding": "5.10.252"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.32", "versionEndExcluding": "5.15.202"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.32", "versionEndExcluding": "6.1.165"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.32", "versionEndExcluding": "6.6.128"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.32", "versionEndExcluding": "6.12.75"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.32", "versionEndExcluding": "6.18.16"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.32", "versionEndExcluding": "6.19.6"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.32", "versionEndExcluding": "7.0"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/c44d86ca949cb1e5566ad14510cc26fa1a17e2d8"}, {"url": "https://git.kernel.org/stable/c/02acc9f72365e50eb45a56b7dacb9114ca3b503c"}, {"url": "https://git.kernel.org/stable/c/8ff329353134280b203cb2bce95311cb8f7cbd8a"}, {"url": "https://git.kernel.org/stable/c/bb273b68c1719c2925e05557f7e7099edb066680"}, {"url": "https://git.kernel.org/stable/c/b2952dbeac2c3c527cb0519d5ffaeb95b062466a"}, {"url": "https://git.kernel.org/stable/c/3bdc3766aafb052aef4baadef455a84c1c0a059d"}, {"url": "https://git.kernel.org/stable/c/2f4daccd9d9b8b2952df7878df8c2e8ba6439398"}, {"url": "https://git.kernel.org/stable/c/5138c936c2c82c9be8883921854bc6f7e1177d8c"}], "title": "ocfs2: fix reflink preserve cleanup issue", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-43168", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-06T15:30:14.532992Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T15:32:35.022Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-43168", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-06T15:30:14.532992Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T15:30:15.529Z"}}], "cna": {"title": "ocfs2: fix reflink preserve cleanup issue", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "0fe9b66c65f3ff227da45381afe7612f91e32740", "lessThan": "c44d86ca949cb1e5566ad14510cc26fa1a17e2d8", "versionType": "git"}, {"status": "affected", "version": "0fe9b66c65f3ff227da45381afe7612f91e32740", "lessThan": "02acc9f72365e50eb45a56b7dacb9114ca3b503c", "versionType": "git"}, {"status": "affected", "version": "0fe9b66c65f3ff227da45381afe7612f91e32740", "lessThan": "8ff329353134280b203cb2bce95311cb8f7cbd8a", "versionType": "git"}, {"status": "affected", "version": "0fe9b66c65f3ff227da45381afe7612f91e32740", "lessThan": "bb273b68c1719c2925e05557f7e7099edb066680", "versionType": "git"}, {"status": "affected", "version": "0fe9b66c65f3ff227da45381afe7612f91e32740", "lessThan": "b2952dbeac2c3c527cb0519d5ffaeb95b062466a", "versionType": "git"}, {"status": "affected", "version": "0fe9b66c65f3ff227da45381afe7612f91e32740", "lessThan": "3bdc3766aafb052aef4baadef455a84c1c0a059d", "versionType": "git"}, {"status": "affected", "version": "0fe9b66c65f3ff227da45381afe7612f91e32740", "lessThan": "2f4daccd9d9b8b2952df7878df8c2e8ba6439398", "versionType": "git"}, {"status": "affected", "version": "0fe9b66c65f3ff227da45381afe7612f91e32740", "lessThan": "5138c936c2c82c9be8883921854bc6f7e1177d8c", "versionType": "git"}], "programFiles": ["fs/ocfs2/xattr.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "2.6.32"}, {"status": "unaffected", "version": "0", "lessThan": "2.6.32", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.252", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.202", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.165", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.128", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.75", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.16", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "6.19.6", "versionType": "semver", "lessThanOrEqual": "6.19.*"}, {"status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/ocfs2/xattr.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/c44d86ca949cb1e5566ad14510cc26fa1a17e2d8"}, {"url": "https://git.kernel.org/stable/c/02acc9f72365e50eb45a56b7dacb9114ca3b503c"}, {"url": "https://git.kernel.org/stable/c/8ff329353134280b203cb2bce95311cb8f7cbd8a"}, {"url": "https://git.kernel.org/stable/c/bb273b68c1719c2925e05557f7e7099edb066680"}, {"url": "https://git.kernel.org/stable/c/b2952dbeac2c3c527cb0519d5ffaeb95b062466a"}, {"url": "https://git.kernel.org/stable/c/3bdc3766aafb052aef4baadef455a84c1c0a059d"}, {"url": "https://git.kernel.org/stable/c/2f4daccd9d9b8b2952df7878df8c2e8ba6439398"}, {"url": "https://git.kernel.org/stable/c/5138c936c2c82c9be8883921854bc6f7e1177d8c"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix reflink preserve cleanup issue\n\ncommit c06c303832ec (\"ocfs2: fix xattr array entry __counted_by error\")\ndoesn't handle all cases and the cleanup job for preserved xattr entries\nstill has bug:\n- the 'last' pointer should be shifted by one unit after cleanup\n an array entry.\n- current code logic doesn't cleanup the first entry when xh_count is 1.\n\nNote, commit c06c303832ec is also a bug fix for 0fe9b66c65f3."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.10.252", "versionStartIncluding": "2.6.32"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.15.202", "versionStartIncluding": "2.6.32"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.1.165", "versionStartIncluding": "2.6.32"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.6.128", "versionStartIncluding": "2.6.32"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.12.75", "versionStartIncluding": "2.6.32"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.18.16", "versionStartIncluding": "2.6.32"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.19.6", "versionStartIncluding": "2.6.32"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.0", "versionStartIncluding": "2.6.32"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-05-11T22:19:06.078Z"}}}, "cveMetadata": {"cveId": "CVE-2026-43168", "state": "PUBLISHED", "dateUpdated": "2026-11-06T15:32:35.022Z", "dateReserved": "2026-05-01T14:12:55.990Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2026-05-06T11:27:44.570Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["fs/ocfs2/xattr.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "c44d86ca949cb1e5566ad14510cc26fa1a17e2d8", "status": "affected", "version": "0fe9b66c65f3ff227da45381afe7612f91e32740", "versionType": "git"}, {"lessThan": "02acc9f72365e50eb45a56b7dacb9114ca3b503c", "status": "affected", "version": "0fe9b66c65f3ff227da45381afe7612f91e32740", "versionType": "git"}, {"lessThan": "8ff329353134280b203cb2bce95311cb8f7cbd8a", "status": "affected", "version": "0fe9b66c65f3ff227da45381afe7612f91e32740", "versionType": "git"}, {"lessThan": "bb273b68c1719c2925e05557f7e7099edb066680", "status": "affected", "version": "0fe9b66c65f3ff227da45381afe7612f91e32740", "versionType": "git"}, {"lessThan": "b2952dbeac2c3c527cb0519d5ffaeb95b062466a", "status": "affected", "version": "0fe9b66c65f3ff227da45381afe7612f91e32740", "versionType": "git"}, {"lessThan": "3bdc3766aafb052aef4baadef455a84c1c0a059d", "status": "affected", "version": "0fe9b66c65f3ff227da45381afe7612f91e32740", "versionType": "git"}, {"lessThan": "2f4daccd9d9b8b2952df7878df8c2e8ba6439398", "status": "affected", "version": "0fe9b66c65f3ff227da45381afe7612f91e32740", "versionType": "git"}, {"lessThan": "5138c936c2c82c9be8883921854bc6f7e1177d8c", "status": "affected", "version": "0fe9b66c65f3ff227da45381afe7612f91e32740", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["fs/ocfs2/xattr.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "2.6.32"}, {"lessThan": "2.6.32", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.252", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.202", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.165", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.128", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.75", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.16", "versionType": "semver"}, {"lessThanOrEqual": "6.19.*", "status": "unaffected", "version": "6.19.6", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.0", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "8CE41C75-8DCF-44F0-8113-EB9D133FC448", "versionEndExcluding": "5.10.252", "versionStartIncluding": "2.6.32", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "4002FC2B-1456-4666-B240-0EBF590C4671", "versionEndExcluding": "5.15.202", "versionStartIncluding": "5.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "797C7F46-D0BE-4FB8-A502-C5EF8E6B6654", "versionEndExcluding": "6.1.165", "versionStartIncluding": "5.16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "851E9353-6C09-4CC9-877E-E09DB164A3C2", "versionEndExcluding": "6.6.128", "versionStartIncluding": "6.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "BCE16369-98ED-41CF-8995-DFDC10B288D2", "versionEndExcluding": "6.12.75", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "B4B8CDA9-BADF-4CF5-8B3B-702DE8EEA40B", "versionEndExcluding": "6.18.16", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "373EEEDA-FAA1-4FB4-B6ED-DB4DD99DBE67", "versionEndExcluding": "6.19.6", "versionStartIncluding": "6.19", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix reflink preserve cleanup issue\n\ncommit c06c303832ec (\"ocfs2: fix xattr array entry __counted_by error\")\ndoesn't handle all cases and the cleanup job for preserved xattr entries\nstill has bug:\n- the 'last' pointer should be shifted by one unit after cleanup\n an array entry.\n- current code logic doesn't cleanup the first entry when xh_count is 1.\n\nNote, commit c06c303832ec is also a bug fix for 0fe9b66c65f3."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nocfs2: correcci\u00f3n del problema de limpieza de preservaci\u00f3n de reflink\n\nEl commit c06c303832ec (\u2019ocfs2: fix xattr array entry __counted_by error\u2019) no maneja todos los casos y la tarea de limpieza para las entradas xattr preservadas todav\u00eda tiene un error:\n- el puntero \u2019last\u2019 deber\u00eda desplazarse una unidad despu\u00e9s de limpiar una entrada de la matriz.\n- la l\u00f3gica del c\u00f3digo actual no limpia la primera entrada cuando xh_count es 1.\n\nNota, el commit c06c303832ec es tambi\u00e9n una correcci\u00f3n de error para 0fe9b66c65f3."}], "id": "CVE-2026-43168", "lastModified": "2026-11-11T20:10:00.273", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-43168", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-06T15:30:14.532992Z", "version": "2.0.3"}}]}, "published": "2026-05-06T12:16:35.060", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/02acc9f72365e50eb45a56b7dacb9114ca3b503c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/2f4daccd9d9b8b2952df7878df8c2e8ba6439398"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/3bdc3766aafb052aef4baadef455a84c1c0a059d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/5138c936c2c82c9be8883921854bc6f7e1177d8c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/8ff329353134280b203cb2bce95311cb8f7cbd8a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/b2952dbeac2c3c527cb0519d5ffaeb95b062466a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/bb273b68c1719c2925e05557f7e7099edb066680"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/c44d86ca949cb1e5566ad14510cc26fa1a17e2d8"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: ocfs2: fix reflink preserve cleanup issue", "id": "2467232", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467232"}, "csaw": false, "cwe": "CWE-911", "details": ["A flaw was found in the Linux kernel's Oracle Cluster File System version 2 (ocfs2). This vulnerability arises from an issue in the reflink preserve cleanup process, where the system incorrectly handles extended attribute (xattr) entries. The cleanup logic fails to properly manage pointers and clean up the first entry under specific conditions. This could potentially lead to data integrity problems or system instability."], "name": "CVE-2026-43168", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-05-06T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-43168\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-43168\nhttps://lore.kernel.org/linux-cve-announce/2026050634-CVE-2026-43168-3cc3@gregkh/T"]}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0fe9b66c65f3ff227da45381afe7612f91e32740,c44d86ca949cb1e5566ad14510cc26fa1a17e2d8)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0fe9b66c65f3ff227da45381afe7612f91e32740,02acc9f72365e50eb45a56b7dacb9114ca3b503c)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0fe9b66c65f3ff227da45381afe7612f91e32740,8ff329353134280b203cb2bce95311cb8f7cbd8a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0fe9b66c65f3ff227da45381afe7612f91e32740,bb273b68c1719c2925e05557f7e7099edb066680)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0fe9b66c65f3ff227da45381afe7612f91e32740,b2952dbeac2c3c527cb0519d5ffaeb95b062466a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0fe9b66c65f3ff227da45381afe7612f91e32740,3bdc3766aafb052aef4baadef455a84c1c0a059d)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0fe9b66c65f3ff227da45381afe7612f91e32740,2f4daccd9d9b8b2952df7878df8c2e8ba6439398)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[0fe9b66c65f3ff227da45381afe7612f91e32740,5138c936c2c82c9be8883921854bc6f7e1177d8c)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "2.6.32"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,2.6.32)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.10.252,5.11.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[5.15.202,5.16.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.1.165,6.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.128,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.75,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.16,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.19.6,6.20.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.0,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-05-06T15:45:06.100432+00:00", "updated": "2026-05-13T17:30:06.825600+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}