PT-2025-46757 · Linux+5 · Linux Kernel+5

Published

2025-09-26

·

Updated

2026-05-07

·

CVE-2025-40200

CVSS v2.0

4.6

Medium

VectorAV:L/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw within the Squashfs file system where negative file sizes can be returned by the squashfs read inode() function. This issue can lead to a warning in overlayfs, specifically a "WARNING in ovl copy up file" message, due to the negative file size being passed from Squashfs. The issue is addressed by checking for negative file sizes and returning an EINVAL error.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-839

Related Identifiers

AZL-70073
BDU:2025-14655
CVE-2025-40200
DLA-4379-1
DLA-4404-1
OESA-2025-2765
OESA-2025-2766
OESA-2025-2767
OESA-2026-1075
OESA-2026-1076
OPENSUSE-SU-2025:20172-1
SUSE-SU-2025:4393-1
SUSE-SU-2025:4422-1
SUSE-SU-2025:4505-1
SUSE-SU-2025:4516-1
SUSE-SU-2025:4517-1
SUSE-SU-2025:4521-1
SUSE-SU-2026:0316-1
SUSE-SU-2026:20012-1
SUSE-SU-2026:20015-1
SUSE-SU-2026:20021-1
SUSE-SU-2026:20039-1
SUSE-SU-2026:20059-1
SUSE-SU-2026:20473-1
SUSE-SU-2026:20496-1
USN-8029-1
USN-8029-2
USN-8029-3
USN-8030-1
USN-8033-1
USN-8033-2
USN-8033-3
USN-8033-4
USN-8033-5
USN-8033-6
USN-8033-7
USN-8033-8
USN-8034-1
USN-8034-2
USN-8048-1
USN-8095-1
USN-8095-2
USN-8095-3
USN-8095-4
USN-8095-5
USN-8100-1
USN-8125-1
USN-8126-1
USN-8141-1
USN-8163-1
USN-8163-2
USN-8165-1
USN-8243-1
USN-8261-1

Affected Products

Debian
Linuxmint
Linux Kernel
Squashfs
Ubuntu
Overlayfs