Log in Start free

Vulnerability · Published Oct 28, 2025 · Assigned by Linux

CVE-2025-40049Squashfs: fix uninit-value in squashfs_get_parent

Unrated

In plain English

A security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS )–Not rated
Exploit odds (30 days)0.2%top 86.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: Squashfs: fix uninit-value in squashfs_get_parent Syzkaller reports a "KMSAN: uninit-value in squashfs_get_parent" bug. This is caused by open_by_handle_at() being called with a file handle containing an invalid parent inode number. In particular the inode number is that of a symbolic link, rather than a directory. Squashfs_get_parent() gets called with that symbolic link inode, and accesses the parent member field. unsigned int parent_ino = squashfs_i(inode)->parent; Because non-directory inodes in Squashfs do not have a parent value, this is uninitialised, and this causes an uninitialised value access. The fix is to initialise parent with the invalid inode 0, which will cause an EINVAL error to be returned. Regular inodes used to share the parent field with the block_list_start field. This is removed in this commit to enable the parent field to contain the invalid inode number 0.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.158-1DEBIAN-CVE-2025-40049
Debian:13linux6.12.57-1DEBIAN-CVE-2025-40049
Debian:14linux6.17.6-1DEBIAN-CVE-2025-40049
Ubuntu:22.04:LTSlinux5.15.0-170.180UBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux6.8.0-106.106UBUNTU-CVE-2025-40049
Ubuntu:25.10linux6.17.0-14.14USN-8029-1
Ubuntu:25.10linux6.17.0-14.14UBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-aws5.15.0-1100.107UBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-aws6.8.0-1050.53UBUNTU-CVE-2025-40049
Ubuntu:25.10linux-aws6.17.0-1007.7UBUNTU-CVE-2025-40049
Ubuntu:25.10linux-aws6.17.0-1007.7USN-8029-2
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-aws-6.176.17.0-1007.7~24.04.1UBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1050.53~22.04.1UBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-azure5.15.0-1109.118UBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-azure6.8.0-1051.57UBUNTU-CVE-2025-40049
Ubuntu:25.10linux-azure6.17.0-1008.8USN-8029-3
Ubuntu:25.10linux-azure6.17.0-1008.8UBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1051.57~22.04.1UBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1109.118.1UBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1058.65UBUNTU-CVE-2025-40049
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1058.65~22.04.1UBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-gcp5.15.0-1100.109UBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-gcp6.8.0-1052.55UBUNTU-CVE-2025-40049
Ubuntu:25.10linux-gcp6.17.0-1007.7USN-8030-1
Ubuntu:25.10linux-gcp6.17.0-1007.7UBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-gcp-6.176.17.0-1008.8~24.04.1UBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1052.55~22.04.1UBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-gke5.15.0-1096.102UBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-gke6.8.0-1048.53UBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1083.91UBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1035.38UBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-106.106~22.04.1UBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-ibm5.15.0-1094.97UBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-ibm6.8.0-1049.49UBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1049.49~22.04.1UBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1095.101UBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-kvm5.15.0-1092.97UBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-170.180UBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-106.106.1UBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-106.106.1~22.04.1UBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1095.96UBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1049.52UBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-nvidia-6.176.17.0-1008.8UBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1049.52~22.04.1UBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1049.52.1UBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1052.52UBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1020.20UBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1041.41UBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-oem-6.176.17.0-1011.11UBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-oem-6.176.17.0-1011.11USN-8048-1
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-oracle5.15.0-1097.103UBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-oracle6.8.0-1047.48UBUNTU-CVE-2025-40049
Ubuntu:25.10linux-oracle6.17.0-1007.7USN-8029-2
Ubuntu:25.10linux-oracle6.17.0-1007.7UBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-oracle-6.176.17.0-1007.7~24.04.1UBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1047.48~22.04.1UBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-raspi5.15.0-1097.100UBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-raspi6.8.0-1050.54UBUNTU-CVE-2025-40049
Ubuntu:25.10linux-raspi6.17.0-1008.8USN-8029-1
Ubuntu:25.10linux-raspi6.17.0-1008.8UBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-40049
Ubuntu:25.10linux-realtime6.17.0-1006.7USN-8029-1
Ubuntu:25.10linux-realtime6.17.0-1006.7UBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-40049
Ubuntu:25.10linux-riscv6.17.0-14.14.1UBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-106.106~22.04.1UBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-40049
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1028.29UBUNTU-CVE-2025-40049
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1064.68UBUNTU-CVE-2025-40049

Affected products (as reported)

VendorProductVersions
Linux Linux 122601408d20c77704268f1dea9f9ce4abf997c2 – before f81a5bc9e924ee1950e0dd82bd10749048390f6e122601408d20c77704268f1dea9f9ce4abf997c2 – before 382a47fae449e554ef1e8c198667fd2f3270b945122601408d20c77704268f1dea9f9ce4abf997c2 – before 61d38b5ce2782bff3cacaacbb8164087a73ed1a5122601408d20c77704268f1dea9f9ce4abf997c2 – before 81a2bca52d43fc9d9abf07408b91255131c5dc53122601408d20c77704268f1dea9f9ce4abf997c2 – before c28b0ca029edf5d0558abcd76cb8c732706cd339122601408d20c77704268f1dea9f9ce4abf997c2 – before 1b3ccd0019132880c94bb00ca7088c1749308f82122601408d20c77704268f1dea9f9ce4abf997c2 – before 91b99db7a92e57ff48a96a1b10fddfd2547e7f53122601408d20c77704268f1dea9f9ce4abf997c2 – before 74058c0a9fc8b2b4d5f4a0ef7ee2cfa66a9e49cf
Linux Linux 2.6.29

References