CVE-2024-49968
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
A vulnerability was found in the Linux kernel's ext4 filesystem. If the default hash version is set to DX_HASH_SIPHASH but the casefold feature is not enabled, mounting the filesystem fails.
Risk Assessment
The risk is that an administrator might inadvertently mount an ext4 filesystem with an incorrect hash configuration, potentially leading to errors or system instability.
Recommendation
It is recommended to update the Linux kernel to a version containing the fix that enforces checking whether the casefold feature is enabled before using the siphash.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: ext4: filesystems without casefold feature cannot be mounted with siphash When mounting the ext4 filesystem, if the default hash version is set to DX_HASH_SIPHASH but the casefold feature is not set, exit the mounting.