CVE-2024-58094

jfs: add check read-only before truncation in jfs_truncate_nolock()

State: Published
Severity: 7.8 High
Published: Apr 16, 2025
Updated: Sep 2, 2026
Reserved: Mar 6, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

jfs: add check read-only before truncation in jfs_truncate_nolock()

Added a check for "read-only" mode in the `jfs_truncate_nolock` function to avoid errors related to writing to a read-only filesystem.

Call stack:

block_write_begin() { jfs_write_failed() { jfs_truncate() { jfs_truncate_nolock() { txEnd() { ... log = JFS_SBI(tblk->sb)->log; // (log == NULL)

If the `isReadOnly(ip)` condition is triggered in `jfs_truncate_nolock`, the function execution will stop, and no further data modification will occur. Instead, the `xtTruncate` function will be called with the "COMMIT_WMAP" flag, preventing modifications in "read-only" mode.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b98506e61e1bb6764c6711198cfab826df8ca952Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1fee021d6cf1d41b3f6e3fd028939be8f5d5c5dbAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b57a8983916fc2cf54fd8de3afc733c6b3d1c0e5Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 41da1715cd24e177678f93ee27f737b095fc838bAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 77038187890ea82d237b05c8a9c4e08a38b1efcbAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f605bc3e162f5c6faa9bd3602ce496053d06a4bbAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b5799dd77054c1ec49b0088b006c9908e256843bAffected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 5.10.269 through 5.10.Not affected 5.15.220 through 5.15.Not affected 6.1.187 through 6.1.Not affected 6.6.156 through 6.6.Not affected 6.12.108 through 6.12.Not affected 6.14.2 through 6.14.Not affected 6.15 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b98506e61e1bb6764c6711198cfab826df8ca952Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1fee021d6cf1d41b3f6e3fd028939be8f5d5c5dbAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b57a8983916fc2cf54fd8de3afc733c6b3d1c0e5Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 41da1715cd24e177678f93ee27f737b095fc838bAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 77038187890ea82d237b05c8a9c4e08a38b1efcbAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before f605bc3e162f5c6faa9bd3602ce496053d06a4bbAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before b5799dd77054c1ec49b0088b006c9908e256843bAffected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
5.10.269 through 5.10.*Not affected
5.15.220 through 5.15.*Not affected
6.1.187 through 6.1.*Not affected
6.6.156 through 6.6.*Not affected
6.12.108 through 6.12.*Not affected
6.14.2 through 6.14.*Not affected
6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.