Medium 5.5Published Oct 21, 2024

CVE-2024-49968ext4: filesystems without casefold feature cannot be mounted with siphash

Updated under an hour ago (Oct 27, 2026, 2:50 PM ET)

Does this affect you?

It affects Linux and 4 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ext4: filesystems without casefold feature cannot be mounted with siphash When mounting the ext4 filesystem, if the default hash version is set to DX_HASH_SIPHASH but the casefold feature is not set, exit the mounting.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 14, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	471fbbea7ff7061b2d6474665cb5a2ceb4fd6500 builds before 86b81d4eab1cd4c56f7447896232cf33472c2395; 471fbbea7ff7061b2d6474665cb5a2ceb4fd6500 builds before 11bd1c279bac701ba91119875796ffff3b98250e; 471fbbea7ff7061b2d6474665cb5a2ceb4fd6500 builds before 52c4538a92da6f3242d4140c03ddc5ee71b39ba8; from 471fbbea7ff7061b2d6474665cb5a2ceb4fd6500 before e1373903db6c4ac994de0d18076280ad88e12dee; from 471fbbea7ff7061b2d6474665cb5a2ceb4fd6500 before 985b67cd86392310d9e9326de941c22fc9340eec	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.6	CISA ADP
linux linux_kernel linux:linux_kernel	before 6.11.3	NVD

References

References

https://git.kernel.org/stable/c/86b81d4eab1cd4c56f7447896232cf33472c2395
https://git.kernel.org/stable/c/11bd1c279bac701ba91119875796ffff3b98250e
https://git.kernel.org/stable/c/52c4538a92da6f3242d4140c03ddc5ee71b39ba8
https://git.kernel.org/stable/c/e1373903db6c4ac994de0d18076280ad88e12dee	patch
https://git.kernel.org/stable/c/985b67cd86392310d9e9326de941c22fc9340eec	patch
https://cert-portal.siemens.com/productcert/html/ssa-019113.html
https://cert-portal.siemens.com/productcert/html/ssa-457936.html

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.