CVE-2024-58095: jfs: add check read-only before txBeginAnon() call
In the Linux kernel, the following vulnerability has been resolved:
jfs: add check read-only before txBeginAnon() call
Added a read-only check before calling txBeginAnon in extAlloc and extRecord. This prevents modification attempts on a read-only mounted filesystem, avoiding potential errors or crashes.
Call trace: txBeginAnon+0xac/0x154 extAlloc+0xe8/0xdec fs/jfs/jfsextent.c:78 jfsgetblock+0x340/0xb98 fs/jfs/inode.c:248 blockwritebeginint+0x580/0x166c fs/buffer.c:2128 blockwritebegin fs/buffer.c:2177 [inline] blockwritebegin+0x98/0x11c fs/buffer.c:2236 jfswritebegin+0x44/0x88 fs/jfs/inode.c:299
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-58095?
CVE-2024-58095 is classified as a moderate severity vulnerability in the Linux kernel.
How do I fix CVE-2024-58095?
To fix CVE-2024-58095, ensure that your Linux kernel is updated to the latest stable version that includes the patch for this vulnerability.
What does CVE-2024-58095 affect?
CVE-2024-58095 affects the Linux kernel, specifically the JFS filesystem functionality.
What vulnerability does CVE-2024-58095 resolve?
CVE-2024-58095 resolves an issue by adding a read-only check before the txBeginAnon() call to prevent modification on read-only filesystems.
Is my system vulnerable to CVE-2024-58095?
Your system may be vulnerable to CVE-2024-58095 if it runs an affected version of the Linux kernel without updating to the patched version.