CVE-2025-40200

Updated on 12 Nov 2025

Severity

Awaiting Analysis

Details

CVSS score
8.6

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

Squashfs: reject negative file sizes in squashfs_read_inode()

Syskaller reports a “WARNING in ovl_copy_up_file” in overlayfs.

This warning is ultimately caused because the underlying Squashfs file system returns a file with a negative file size.

This commit checks for a negative file size and returns EINVAL.

[[email protected]: only need to check 64 bit quantity]

Details

Affected packages:
linux @ 5.4.0 (+2 more)

In the Linux kernel, the following vulnerability has been resolved:

Squashfs: reject negative file sizes in squashfs_read_inode()

Syskaller reports a “WARNING in ovl_copy_up_file” in overlayfs.

This warning is ultimately caused because the underlying Squashfs file system returns a file with a negative file size.

This commit checks for a negative file size and returns EINVAL.

[[email protected]: only need to check 64 bit quantity]

Fixes