Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-40200

Squashfs: reject negative file sizes in squashfs_read_inode()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: Squashfs: reject negative file sizes in squashfs_read_inode() Syskaller reports a "WARNING in ovl_copy_up_file" in overlayfs. This warning is ultimately caused because the underlying Squashfs file system returns a file with a negative file size. This commit checks for a negative file size and returns EINVAL. [phillip@squashfs.org.uk: only need to check 64 bit quantity]

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6545b246a2c815a8fcd07d58240effb6ec3481b1 to < 54170057a5fadd24a37b70de41e61d39284d9bd7affected
  • 6545b246a2c815a8fcd07d58240effb6ec3481b1 to < 2871c74caa3f4f05b429e6bfefebac62dbf1b408affected
  • 6545b246a2c815a8fcd07d58240effb6ec3481b1 to < fbfc745db628de31f5c089147deeb87e95b89e66affected
  • 6545b246a2c815a8fcd07d58240effb6ec3481b1 to < 8118f66124895829443d09c207e654adcb2f9321affected
  • 6545b246a2c815a8fcd07d58240effb6ec3481b1 to < 8c7aad76751816207fee556d44aa88a710824810affected
  • 6545b246a2c815a8fcd07d58240effb6ec3481b1 to < 875fb3f87ae0225b881319ba016a1a8c4ffd5812affected
  • 6545b246a2c815a8fcd07d58240effb6ec3481b1 to < f271155ff31aca8ef82c61c8df23ca97e9a77dd4affected
  • 6545b246a2c815a8fcd07d58240effb6ec3481b1 to < 9f1c14c1de1bdde395f6cc893efa4f80a2ae3b2baffected

Linux Linux

Default version status: affected

  • 2.6.29affected
  • 0 to < 2.6.29unaffected
  • 5.4.301 to ≤ 5.4.*unaffected
  • 5.10.246 to ≤ 5.10.*unaffected
  • 5.15.195 to ≤ 5.15.*unaffected
  • 6.1.157 to ≤ 6.1.*unaffected
  • 6.6.113 to ≤ 6.6.*unaffected
  • 6.12.54 to ≤ 6.12.*unaffected
  • 6.17.4 to ≤ 6.17.*unaffected
  • 6.18 to ≤ *unaffected

References