Critical Vulnerability in Linux Kernel: ext4 Filesystem Mounting Issue
Summary
DEBIAN-CVE-2024-49968: In the Linux kernel, the following vulnerability has been resolved: ext4: filesystems without casefold feature cannot be mounted with siphash When mounting the ext4 filesystem, if the default hash version is set to DX_HA... Affects linux versions < 6.11.4-1. Fixed in 6.11.4-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, including Debian. It manages system resources and hardware interactions, providing essential services for software applications. The ext4 filesystem is a widely used file system in Linux, known for its performance and reliability. However, it has been found vulnerable to a specific issue where filesystems without the casefold feature cannot be mounted with the siphash hash version, potentially leading to system instability.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the ext4 filesystem handling. When attempting to mount an ext4 filesystem, if the default hash version is set to DX_HASH_SIPHASH and the casefold feature is not enabled, the system will exit the mounting process. This can lead to operational disruptions and may affect data accessibility, as the filesystem cannot be mounted correctly. The vulnerability is rooted in the kernel's handling of filesystem features and hash versions, which could be exploited in environments relying on specific configurations.
How To Fix
Minimum fixed version
6.11.4-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can avoid setting the default hash version to DX_HASH_SIPHASH when mounting ext4 filesystems that do not have the casefold feature enabled. This may involve modifying the mount options in the system configuration.
Conclusion
The vulnerability in the Linux kernel regarding the ext4 filesystem poses significant risks to system stability and data accessibility. Users are strongly advised to update to the patched version 6.11.4-1 to mitigate these risks. Temporary workarounds are available, but updating is the most effective solution.
See every vulnerability recorded for linux →
FAQ
The vulnerability affects the ext4 filesystem in the Linux kernel, causing issues when mounting filesystems without the casefold feature if the default hash version is set to DX_HASH_SIPHASH.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The primary risk is the inability to mount ext4 filesystems correctly, which can lead to data inaccessibility and system instability.
Yes, the patched version of the Linux kernel is 6.11.4-1 for both Debian 13 and 14.
If immediate updates are not possible, consider modifying the mount options to avoid using DX_HASH_SIPHASH for ext4 filesystems without casefold support.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
