01 Record

CVE-2024-58094

jfs: add check read-only before truncation in jfs_truncate_nolock()

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

jfs: add check read-only before truncation in jfs_truncate_nolock()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.22% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 13.2% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-09-02.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2025-04-16 14:11Z1 YR AGO
Last updated: 2026-09-02 12:49Z1 MO AGO
Reserved: 2025-03-06
Assigning CNA: Linux
Record state: PUBLISHED
Severity: High (CVSS 7.8)
CNA CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: 240f68998960a6e49f2317fb4798ab637ad485c812c849d20dcdce76a2b917bc

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < b98506e61e1bb6764c6711198cfab826df8ca952, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 1fee021d6cf1d41b3f6e3fd028939be8f5d5c5db, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < b57a8983916fc2cf54fd8de3afc733c6b3d1c0e5, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 41da1715cd24e177678f93ee27f737b095fc838b, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 77038187890ea82d237b05c8a9c4e08a38b1efcb, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < f605bc3e162f5c6faa9bd3602ce496053d06a4bb, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < b5799dd77054c1ec49b0088b006c9908e256843b, 2.6.12—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/b98506e61e1bb6764c6711198cfab826df8ca952
git.kernel.orghttps://git.kernel.org/stable/c/1fee021d6cf1d41b3f6e3fd028939be8f5d5c5db
git.kernel.orghttps://git.kernel.org/stable/c/b57a8983916fc2cf54fd8de3afc733c6b3d1c0e5
git.kernel.orghttps://git.kernel.org/stable/c/41da1715cd24e177678f93ee27f737b095fc838b
git.kernel.orghttps://git.kernel.org/stable/c/77038187890ea82d237b05c8a9c4e08a38b1efcb
git.kernel.orghttps://git.kernel.org/stable/c/f605bc3e162f5c6faa9bd3602ce496053d06a4bb
git.kernel.orghttps://git.kernel.org/stable/c/b5799dd77054c1ec49b0088b006c9908e256843b

07 Fixed in

Debian 12

linux
Fixed in 6.1.187-1
linux-6.12
Fixed in 6.12.111-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.111-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.16.3-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.