https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 19:50:49 +0000 https://vulnerability.circl.lu/vuln/cve-2025-40049 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Squashfs: fix uninit-value in squashfs_get_parent</p> <p>Syzkaller reports a &#34;KMSAN: uninit-value in squashfs_get_parent&#34; bug.</p> <p>This is caused by open_by_handle_at() being called with a file handle containing an invalid parent inode number. In particular the inode number is that of a symbolic link, rather than a directory.</p> <p>Squashfs_get_parent() gets called with that symbolic link inode, and accesses the parent member field.</p> <p>unsigned int parent_ino = squashfs_i(inode)-&gt;parent;</p> <p>Because non-directory inodes in Squashfs do not have a parent value, this is uninitialised, and this causes an uninitialised value access.</p> <p>The fix is to initialise parent with the invalid inode 0, which will cause an EINVAL error to be returned.</p> <p>Regular inodes used to share the parent field with the block_list_start field. This is removed in this commit to enable the parent field to contain the invalid inode number 0.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>Squashfs: fix uninit-value in squashfs_get_parent</p> <p>Syzkaller reports a &#34;KMSAN: uninit-value in squashfs_get_parent&#34; bug.</p> <p>This is caused by open_by_handle_at() being called with a file handle containing an invalid parent inode number. In particular the inode number is that of a symbolic link, rather than a directory.</p> <p>Squashfs_get_parent() gets called with that symbolic link inode, and accesses the parent member field.</p> <p>unsigned int parent_ino = squashfs_i(inode)-&gt;parent;</p> <p>Because non-directory inodes in Squashfs do not have a parent value, this is uninitialised, and this causes an uninitialised value access.</p> <p>The fix is to initialise parent with the invalid inode 0, which will cause an EINVAL error to be returned.</p> <p>Regular inodes used to share the parent field with the block_list_start field. This is removed in this commit to enable the parent field to contain the invalid inode number 0.</p> https://vulnerability.circl.lu/vuln/cve-2025-40049