What’s Vulnerable › Vulnerabilities

CVE-2024-49968: ext4: filesystems without casefold feature cannot be mounted with siphash

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-10-21 · updated 2026-10-15

Description

In the Linux kernel, the following vulnerability has been resolved: ext4: filesystems without casefold feature cannot be mounted with siphash When mounting the ext4 filesystem, if the default hash version is set to DX_HASH_SIPHASH but the casefold feature is not set, exit the mounting.

Affected products

• Linux kernel: before 6.11.3 — fixed in 6.11.3

How to fix

Upgrade to a fixed version: Linux kernel 6.11.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/11bd1c279bac701ba91119875796ffff3b98250e
• https://git.kernel.org/stable/c/52c4538a92da6f3242d4140c03ddc5ee71b39ba8
• https://git.kernel.org/stable/c/86b81d4eab1cd4c56f7447896232cf33472c2395
• https://git.kernel.org/stable/c/985b67cd86392310d9e9326de941c22fc9340eec
• https://git.kernel.org/stable/c/e1373903db6c4ac994de0d18076280ad88e12dee
• https://cert-portal.siemens.com/productcert/html/ssa-019113.html
• https://cert-portal.siemens.com/productcert/html/ssa-457936.html

Get alerted when CVE-2024-49968 or the next vulnerability affects your stack