CVE-2025-40200 — Numeric Range Comparison Without Minimum Check in Linux
Severity
7.8HIGHOSV
OSV5.5OSV3.2
No vectorEPSS
0.0%
top 87.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedNov 12
Latest updateApr 13
Description
In the Linux kernel, the following vulnerability has been resolved:
Squashfs: reject negative file sizes in squashfs_read_inode()
Syskaller reports a "WARNING in ovl_copy_up_file" in overlayfs.
This warning is ultimately caused because the underlying Squashfs file
system returns a file with a negative file size.
This commit checks for a negative file size and returns EINVAL.
[[email protected]: only need to check 64 bit quantity]
Affected Packages7 packages
▶CVEListV5linux/linux6545b246a2c815a8fcd07d58240effb6ec3481b1 — 54170057a5fadd24a37b70de41e61d39284d9bd7+8