Linux Kernel JFS Filesystem Read-Only Check Vulnerability in Transaction Management

A vulnerability in the Linux kernel's JFS filesystem has been addressed. The issue involved the transaction management function 'txBegin', which did not properly check if the filesystem was mounted as read-only. This oversight could lead to a null pointer dereference. The vulnerability has been fixed by adding a check for read-only filesystems in 'txBegin' before initiating a transaction.

Impact

The vulnerability could lead to a null pointer dereference, potentially causing a system crash or instability.

Reproduction

The vulnerability can be reproduced by mounting a JFS filesystem as read-only and then initiating a transaction using the 'txBegin' function. Without the patch, the function would proceed without recognizing the read-only status, leading to a null pointer dereference.

Remediation

Users can apply the patch available in the Linux kernel stable tree to address this vulnerability.