In the Linux kernel, the following vulnerability has been resolved:
Squashfs: reject negative file sizes in squashfsreadinode()
Syskaller reports a "WARNING in ovlcopyup_file" in overlayfs.
This warning is ultimately caused because the underlying Squashfs file system returns a file with a negative file size.
This commit checks for a negative file size and returns EINVAL.
[phillip@squashfs.org.uk: only need to check 64 bit quantity]
[
{
"digest": {
"function_hash": "157240414510023501902249104350430269098",
"length": 8729.0
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-40200-1160aef5",
"target": {
"file": "fs/squashfs/inode.c",
"function": "squashfs_read_inode"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@875fb3f87ae0225b881319ba016a1a8c4ffd5812",
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"135053869338055001285143069448241278863",
"105019204791329359693844398383094580704",
"173049842754999535071170034790445888831",
"6653894840334625375276695337089376962"
]
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-40200-2f0f467b",
"target": {
"file": "fs/squashfs/inode.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8118f66124895829443d09c207e654adcb2f9321",
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"135053869338055001285143069448241278863",
"105019204791329359693844398383094580704",
"173049842754999535071170034790445888831",
"6653894840334625375276695337089376962"
]
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-40200-36b0b6a1",
"target": {
"file": "fs/squashfs/inode.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8c7aad76751816207fee556d44aa88a710824810",
"signature_type": "Line"
},
{
"digest": {
"function_hash": "157240414510023501902249104350430269098",
"length": 8729.0
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-40200-3e5f81b0",
"target": {
"file": "fs/squashfs/inode.c",
"function": "squashfs_read_inode"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8118f66124895829443d09c207e654adcb2f9321",
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"135053869338055001285143069448241278863",
"105019204791329359693844398383094580704",
"173049842754999535071170034790445888831",
"6653894840334625375276695337089376962"
]
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-40200-507867fc",
"target": {
"file": "fs/squashfs/inode.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fbfc745db628de31f5c089147deeb87e95b89e66",
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"135053869338055001285143069448241278863",
"105019204791329359693844398383094580704",
"173049842754999535071170034790445888831",
"6653894840334625375276695337089376962"
]
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-40200-5441277f",
"target": {
"file": "fs/squashfs/inode.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f1c14c1de1bdde395f6cc893efa4f80a2ae3b2b",
"signature_type": "Line"
},
{
"digest": {
"function_hash": "157240414510023501902249104350430269098",
"length": 8729.0
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-40200-5f18303c",
"target": {
"file": "fs/squashfs/inode.c",
"function": "squashfs_read_inode"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@54170057a5fadd24a37b70de41e61d39284d9bd7",
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"135053869338055001285143069448241278863",
"105019204791329359693844398383094580704",
"173049842754999535071170034790445888831",
"6653894840334625375276695337089376962"
]
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-40200-604956eb",
"target": {
"file": "fs/squashfs/inode.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@875fb3f87ae0225b881319ba016a1a8c4ffd5812",
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"135053869338055001285143069448241278863",
"105019204791329359693844398383094580704",
"173049842754999535071170034790445888831",
"6653894840334625375276695337089376962"
]
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-40200-66de6488",
"target": {
"file": "fs/squashfs/inode.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2871c74caa3f4f05b429e6bfefebac62dbf1b408",
"signature_type": "Line"
},
{
"digest": {
"function_hash": "157240414510023501902249104350430269098",
"length": 8729.0
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-40200-6849f68a",
"target": {
"file": "fs/squashfs/inode.c",
"function": "squashfs_read_inode"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@fbfc745db628de31f5c089147deeb87e95b89e66",
"signature_type": "Function"
},
{
"digest": {
"function_hash": "157240414510023501902249104350430269098",
"length": 8729.0
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-40200-6a11b98f",
"target": {
"file": "fs/squashfs/inode.c",
"function": "squashfs_read_inode"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8c7aad76751816207fee556d44aa88a710824810",
"signature_type": "Function"
},
{
"digest": {
"function_hash": "157240414510023501902249104350430269098",
"length": 8729.0
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-40200-7fdd8570",
"target": {
"file": "fs/squashfs/inode.c",
"function": "squashfs_read_inode"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f271155ff31aca8ef82c61c8df23ca97e9a77dd4",
"signature_type": "Function"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"135053869338055001285143069448241278863",
"105019204791329359693844398383094580704",
"173049842754999535071170034790445888831",
"6653894840334625375276695337089376962"
]
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-40200-a75f9027",
"target": {
"file": "fs/squashfs/inode.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@54170057a5fadd24a37b70de41e61d39284d9bd7",
"signature_type": "Line"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"135053869338055001285143069448241278863",
"105019204791329359693844398383094580704",
"173049842754999535071170034790445888831",
"6653894840334625375276695337089376962"
]
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-40200-a7e5a729",
"target": {
"file": "fs/squashfs/inode.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f271155ff31aca8ef82c61c8df23ca97e9a77dd4",
"signature_type": "Line"
},
{
"digest": {
"function_hash": "157240414510023501902249104350430269098",
"length": 8729.0
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-40200-caf62a5e",
"target": {
"file": "fs/squashfs/inode.c",
"function": "squashfs_read_inode"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2871c74caa3f4f05b429e6bfefebac62dbf1b408",
"signature_type": "Function"
},
{
"digest": {
"function_hash": "93516778735303243118517971488080413511",
"length": 8747.0
},
"deprecated": false,
"signature_version": "v1",
"id": "CVE-2025-40200-d5079ec4",
"target": {
"file": "fs/squashfs/inode.c",
"function": "squashfs_read_inode"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9f1c14c1de1bdde395f6cc893efa4f80a2ae3b2b",
"signature_type": "Function"
}
]