CVE-2024-49968: ext4: filesystems without casefold feature cannot be mounted with siphash
ext4: filesystems without casefold feature cannot be mounted with siphash
Other sources
This CVE was automatically created from a reference found in an email or other text. If you are reading this, then this CVE entry is probably erroneous, since this text should be replaced by the official CVE description automatically.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.25-1Fixed in 6.12.27-1 - Configuration
When mounting an ext4 filesystem, ensure that if the casefold feature is not set, the default hash version is not set to DX_HASH_SIPHASH; otherwise exit the mount.
Linux kernel ext4 default hash version = DX_HASH_SIPHASH not allowed when casefold feature is not set
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49968?
CVE-2024-49968 is considered a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2024-49968?
To fix CVE-2024-49968, update your Linux kernel to version 6.11.3 or later.
What does CVE-2024-49968 affect?
CVE-2024-49968 affects the ext4 filesystem in Linux kernels where the casefold feature is not set.
Can CVE-2024-49968 be exploited remotely?
CVE-2024-49968 does not have a remote exploitation vector as it pertains to local filesystem mounting.
What environments are affected by CVE-2024-49968?
CVE-2024-49968 affects any Linux environment running the vulnerable versions of the kernel without the casefold feature.