CVE-2025-40200
Full vulnerability record from the local CVENow database.
Description
In the Linux kernel, the following vulnerability has been resolved: Squashfs: reject negative file sizes in squashfs_read_inode() Syskaller reports a "WARNING in ovl_copy_up_file" in overlayfs. This warning is ultimately caused because the underlying Squashfs file system returns a file with a negative file size. This commit checks for a negative file size and returns EINVAL. [[email protected]: only need to check 64 bit quantity]
Severity
Not scored
CVSS score
Not available
Vulnerability status
Deferred
Source identifier
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published
2025-11-12 22:15:47.160000
Last modified
2026-10-19 21:10:00.160000
View original CVE JSON
{
"id": "CVE-2025-40200",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-11-12T22:15:47.160",
"lastModified": "2026-10-19T21:10:00.160",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nSquashfs: reject negative file sizes in squashfs_read_inode()\n\nSyskaller reports a \"WARNING in ovl_copy_up_file\" in overlayfs.\n\nThis warning is ultimately caused because the underlying Squashfs file\nsystem returns a file with a negative file size.\n\nThis commit checks for a negative file size and returns EINVAL.\n\n[[email protected]: only need to check 64 bit quantity]"
},
{
"lang": "es",
"value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nSquashfs: rechaza tamaños de archivo negativos en squashfs_read_inode()\n\nSyskaller informa de una “WARNING in ovl_copy_up_file” en overlayfs.\n\nEsta advertencia es causada en última instancia porque el sistema de archivos Squashfs subyacente devuelve un archivo con un tamaño de archivo negativo.\n\nEste commit verifica si hay un tamaño de archivo negativo y devuelve EINVAL.\n\n[[email protected]: solo es necesario verificar la cantidad de 64 bits]"
}
],
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "unaffected",
"programFiles": [
"fs/squashfs/inode.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "6545b246a2c815a8fcd07d58240effb6ec3481b1",
"lessThan": "54170057a5fadd24a37b70de41e61d39284d9bd7",
"versionType": "git",
"status": "affected"
},
{
"version": "6545b246a2c815a8fcd07d58240effb6ec3481b1",
"lessThan": "2871c74caa3f4f05b429e6bfefebac62dbf1b408",
"versionType": "git",
"status": "affected"
},
{
"version": "6545b246a2c815a8fcd07d58240effb6ec3481b1",
"lessThan": "fbfc745db628de31f5c089147deeb87e95b89e66",
"versionType": "git",
"status": "affected"
},
{
"version": "6545b246a2c815a8fcd07d58240effb6ec3481b1",
"lessThan": "8118f66124895829443d09c207e654adcb2f9321",
"versionType": "git",
"status": "affected"
},
{
"version": "6545b246a2c815a8fcd07d58240effb6ec3481b1",
"lessThan": "8c7aad76751816207fee556d44aa88a710824810",
"versionType": "git",
"status": "affected"
},
{
"version": "6545b246a2c815a8fcd07d58240effb6ec3481b1",
"lessThan": "875fb3f87ae0225b881319ba016a1a8c4ffd5812",
"versionType": "git",
"status": "affected"
},
{
"version": "6545b246a2c815a8fcd07d58240effb6ec3481b1",
"lessThan": "f271155ff31aca8ef82c61c8df23ca97e9a77dd4",
"versionType": "git",
"status": "affected"
},
{
"version": "6545b246a2c815a8fcd07d58240effb6ec3481b1",
"lessThan": "9f1c14c1de1bdde395f6cc893efa4f80a2ae3b2b",
"versionType": "git",
"status": "affected"
}
]
},
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "affected",
"programFiles": [
"fs/squashfs/inode.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "2.6.29",
"status": "affected"
},
{
"version": "0",
"lessThan": "2.6.29",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.4.301",
"lessThanOrEqual": "5.4.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.10.246",
"lessThanOrEqual": "5.10.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.15.195",
"lessThanOrEqual": "5.15.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.1.157",
"lessThanOrEqual": "6.1.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.6.113",
"lessThanOrEqual": "6.6.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.12.54",
"lessThanOrEqual": "6.12.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.17.4",
"lessThanOrEqual": "6.17.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.18",
"lessThanOrEqual": "*",
"versionType": "original_commit_for_fix",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {},
"references": [
{
"url": "https://git.kernel.org/stable/c/2871c74caa3f4f05b429e6bfefebac62dbf1b408",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/54170057a5fadd24a37b70de41e61d39284d9bd7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/8118f66124895829443d09c207e654adcb2f9321",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/875fb3f87ae0225b881319ba016a1a8c4ffd5812",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/8c7aad76751816207fee556d44aa88a710824810",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/9f1c14c1de1bdde395f6cc893efa4f80a2ae3b2b",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/f271155ff31aca8ef82c61c8df23ca97e9a77dd4",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/fbfc745db628de31f5c089147deeb87e95b89e66",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
]
}