CVE-2025-40200

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
12/11/2025
Last modified:
14/11/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> Squashfs: reject negative file sizes in squashfs_read_inode()<br /> <br /> Syskaller reports a "WARNING in ovl_copy_up_file" in overlayfs.<br /> <br /> This warning is ultimately caused because the underlying Squashfs file<br /> system returns a file with a negative file size.<br /> <br /> This commit checks for a negative file size and returns EINVAL.<br /> <br /> [phillip@squashfs.org.uk: only need to check 64 bit quantity]

Impact