CVE-2025-40200

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the Squashfs file system where negative file sizes can be returned by the squashfs read inode() function. This issue can lead to a warning in overlayfs, specifically a "WARNING in ovl copy up file" message, due to the negative file size being passed from Squashfs. The issue is addressed by checking for negative file sizes and returning an EINVAL error.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.