CVE-2025-40200
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: Squashfs: reject negative file sizes in squashfs_read_inode() Syskaller reports a "WARNING in ovl_copy_up_file" in overlayfs. This warning is ultimately caused because the underlying Squashfs file system returns a file with a negative file size. This commit checks for a negative file size and returns EINVAL. [[email protected]: only need to check 64 bit quantity]
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedNov 12, 2025
First seenNov 12, 2025
How to fix
Update
- Linux Linux54170057a5fadd24a37b70de41e61d39284d9bd7, 2871c74caa3f4f05b429e6bfefebac62dbf1b408, fbfc745db628de31f5c089147deeb87e95b89e66, 8118f66124895829443d09c207e654adcb2f9321, 8c7aad76751816207fee556d44aa88a710824810, 875fb3f87ae0225b881319ba016a1a8c4ffd5812, f271155ff31aca8ef82c61c8df23ca97e9a77dd4, 9f1c14c1de1bdde395f6cc893efa4f80a2ae3b2b or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 6545b246a2c815a8fcd07d58240effb6ec3481b1 ≤ v < 54170057a5fadd24a37b70de41e61d39284d9bd7, 6545b246a2c815a8fcd07d58240effb6ec3481b1 ≤ v < 2871c74caa3f4f05b429e6bfefebac62dbf1b408, 6545b246a2c815a8fcd07d58240effb6ec3481b1 ≤ v < fbfc745db628de31f5c089147deeb87e95b89e66, 6545b246a2c815a8fcd07d58240effb6ec3481b1 ≤ v < 8118f66124895829443d09c207e654adcb2f9321, 6545b246a2c815a8fcd07d58240effb6ec3481b1 ≤ v < 8c7aad76751816207fee556d44aa88a710824810, 6545b246a2c815a8fcd07d58240effb6ec3481b1 ≤ v < 875fb3f87ae0225b881319ba016a1a8c4ffd5812, 6545b246a2c815a8fcd07d58240effb6ec3481b1 ≤ v < f271155ff31aca8ef82c61c8df23ca97e9a77dd4, 6545b246a2c815a8fcd07d58240effb6ec3481b1 ≤ v < 9f1c14c1de1bdde395f6cc893efa4f80a2ae3b2b, 2.6.29 | 54170057a5fadd24a37b70de41e61d39284d9bd7, 2871c74caa3f4f05b429e6bfefebac62dbf1b408, fbfc745db628de31f5c089147deeb87e95b89e66, 8118f66124895829443d09c207e654adcb2f9321, 8c7aad76751816207fee556d44aa88a710824810, 875fb3f87ae0225b881319ba016a1a8c4ffd5812, f271155ff31aca8ef82c61c8df23ca97e9a77dd4, 9f1c14c1de1bdde395f6cc893efa4f80a2ae3b2b |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.