CVE-2024-58094 jfs: add check read-only before truncation in jfs_truncate_nolock()
A null pointer dereference in the JFS filesystem allows local attackers to cause a denial of service by triggering truncation on a read-only mount.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-58094?
CVE-2024-58094 is a high-severity vulnerability in Linux kernel, published on 16 Apr 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
jfs: add check read-only before truncation in jfs_truncate_nolock()
Added a check for "read-only" mode in the `jfs_truncate_nolock` function to avoid errors related to writing to a read-only filesystem.
Call stack:
block_write_begin() { jfs_write_failed() { jfs_truncate() { jfs_truncate_nolock() { txEnd() { ... log = JFS_SBI(tblk->sb)->log; // (log == NULL)
If the `isReadOnly(ip)` condition is triggered in `jfs_truncate_nolock`, the function execution will stop, and no further data modification will occur. Instead, the `xtTruncate` function will be called with the "COMMIT_WMAP" flag, preventing modifications in "read-only" mode.
Which versions are affected by CVE-2024-58094?
It affects 1 product.
Products include Linux kernel.
How do I fix CVE-2024-58094?
Apply the vendor's patch.
Is CVE-2024-58094 being exploited?
There is no known exploitation of CVE-2024-58094 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as BELL-CVE-2024-58094, DEBIAN-CVE-2024-58094, GHSA-p55c-m7rf-5552, ROOT-OS-DEBIAN-11-CVE-2024-58094, ROOT-OS-DEBIAN-12-CVE-2024-58094, ROOT-OS-DEBIAN-13-CVE-2024-58094 and 3 more.