5.5

CVE-2024-58095: jfs: add check read-only before txBeginAnon() call

Modified
AliasesUBUNTU-CVE-2024-58095DEBIAN-CVE-2024-58095CGA-26hw-6rjg-6j9j
Published 16-04-2025Last modified 02-09-2026

Vulnerability summary

CVE-2024-58095 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.20% chance of exploitation in the next 30 days, higher than 10.4% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 5.5, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.20%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 14 · Related 15
SUSE-SU-2025:01614-1SUSE-SU-2025:01707-1SUSE-SU-2025:01919-1SUSE-SU-2025:01951-1SUSE-SU-2025:01964-1SUSE-SU-2025:01967-1

Timeline

  1. 16-04-2025
    PublishedVulnerability first disclosed.
  2. 02-09-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: jfs: add check read-only before txBeginAnon() call Added a read-only check before calling `txBeginAnon` in `extAlloc` and `extRecord`. This prevents modification attempts on a read-only mounted filesystem, avoiding potential errors or crashes. Call trace: txBeginAnon+0xac/0x154 extAlloc+0xe8/0xdec fs/jfs/jfs_extent.c:78 jfs_get_block+0x340/0xb98 fs/jfs/inode.c:248 __block_write_begin_int+0x580/0x166c fs/buffer.c:2128 __block_write_begin fs/buffer.c:2177 [inline] block_write_begin+0x98/0x11c fs/buffer.c:2236 jfs_write_begin+0x44/0x88 fs/jfs/inode.c:299

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.20%

Chance of exploitation in the next 30 days

Percentile

10%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.20% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu141 products
  • linuxAll versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Chainguard5 products
  • linux-aws-6.12< 6.12.74-r0 | < 6.12.65-r0 | < 6.12.57-r2 | < 6.12.57-r1 | < 6.12.72-r0 | < 6.12.65-r1 | < 6.12.66-r0 | < 6.12.65-r2 | < 6.12.77-r0 | < 6.12.62-r2 | < 6.12.68-r1 | < 6.12.71-r0 | < 6.12.77-r1 | < 6.12.80-r0 | < 6.12.69-r0 | < 6.12.62-r0 | < 6.12.72-r1 | < 6.12.78-r0 | < 6.12.63-r0 | < 6.12.77-r2 | < 6.12.68-r0 | < 6.12.74-r1 | < 6.12.67-r0 | < 6.12.76-r0 | < 6.12.62-r1 | < 6.12.60-r4 | < 6.12.70-r0
  • linux-azure-6.12< 6.12.63-r0 | < 6.12.69-r0 | < 6.12.62-r0 | < 6.12.57-r2 | < 6.12.65-r4 | < 6.12.78-r0 | < 6.12.77-r0 | < 6.12.76-r0 | < 6.12.60-r3 | < 6.12.66-r0 | < 6.12.65-r1 | < 6.12.72-r0 | < 6.12.71-r0 | < 6.12.65-r3 | < 6.12.57-r1 | < 6.12.70-r0 | < 6.12.62-r1 | < 6.12.77-r1 | < 6.12.60-r4 | < 6.12.68-r0 | < 6.12.67-r0 | < 6.12.74-r0 | < 6.12.80-r0 | < 6.12.62-r2 | < 6.12.65-r2 | < 6.12.74-r1 | < 6.12.77-r2
  • linux-gcp-6.12< 6.12.74-r1 | < 6.12.66-r0 | < 6.12.65-r2 | < 6.12.74-r0 | < 6.12.77-r0 | < 6.12.62-r0 | < 6.12.72-r0 | < 6.12.77-r2 | < 6.12.65-r1 | < 6.12.71-r0 | < 6.12.68-r0 | < 6.12.60-r4 | < 6.12.63-r0 | < 6.12.67-r0 | < 6.12.78-r0 | < 6.12.62-r2 | < 6.12.76-r0 | < 6.12.77-r1 | < 6.12.80-r0 | < 6.12.57-r1 | < 6.12.70-r0 | < 6.12.65-r0 | < 6.12.68-r1 | < 6.12.62-r1 | < 6.12.69-r0 | < 6.12.60-r3 | < 6.12.57-r2
  • linux-qemu-6.12< 6.12.72-r0 | < 6.12.69-r0 | < 6.12.66-r0 | < 6.12.67-r0 | < 6.12.74-r1 | < 6.12.76-r0 | < 6.12.70-r0 | < 6.12.65-r2 | < 6.12.77-r2 | < 6.12.77-r1 | < 6.12.65-r1 | < 6.12.78-r0 | < 6.12.77-r0 | < 6.12.80-r0 | < 6.12.68-r0 | < 6.12.71-r0 | < 6.12.74-r0
  • linux-vmware-6.12< 6.12.67-r0 | < 6.12.72-r0 | < 6.12.66-r0 | < 6.12.68-r0 | < 6.12.74-r0 | < 6.12.65-r1 | < 6.12.71-r0 | < 6.12.69-r0 | < 6.12.74-r1 | < 6.12.77-r0 | < 6.12.70-r0 | < 6.12.80-r0 | < 6.12.77-r2 | < 6.12.68-r1 | < 6.12.78-r0 | < 6.12.76-r0 | < 6.12.65-r2 | < 6.12.77-r1
Debian2 products
  • linux< 6.1.187-1 | < 6.12.111-1 | < 6.16.3-1
  • linux-6.12< 6.12.111-1~deb12u1
Linux2 products
  • linux≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 97ac32b08442f5327867ad7d70d6ac6ebaa2a41a | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 93f11ab37f1c657f4265228ba3c2ff66bbefa24d | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 469bd67fc338e77d7585e4f20d4212afd44fefdc | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 47a99881ecc50ff2bf4e7a6c3058fe1704073df9 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 939dba7a6404d4ac88e2539cb21ac659f5757fd9 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 15469c408af2d7a52fb186a92f2f091b0f13b1fb | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 0176e69743ecc02961f2ae1ea42439cd2bf9ed58 | 2.6.12
  • linux_kernel≥ 2.6.13, < 6.14.2 | 2.6.12 | 2.6.12:rc2 | 2.6.12:rc3 | 2.6.12:rc4 | 2.6.12:rc5

4 vendors · 150 products

References

14 links
Show all 14 references