CVE-2025-40200

CVE-2025-40200

published November 13, 2025

CVSS
—
EPSS
0%
Percentile
10.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

Squashfs: reject negative file sizes in squashfs_read_inode()

Syskaller reports a "WARNING in ovl_copy_up_file" in overlayfs.

This warning is ultimately caused because the underlying Squashfs file

system returns a file with a negative file size.

This commit checks for a negative file size and returns EINVAL.

[[email protected]: only need to check 64 bit quantity]

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00210 · 10.6th percentile
Published
2025-11-13T03:15Z
References (8)
EPSS history
Timeline
  • 12 NOV 21:56Z
    Squashfs: reject negative file sizes in squashfs_read_inode()
    cvelistv5