Buffer Overflow Vulnerability in Linux Kernel Affecting Squashfs Filesystem

CVE-2025-38415

What is CVE-2025-38415?

A vulnerability in the Linux kernel's Squashfs filesystem can lead to a buffer overflow due to improper validation of block sizes in concurrent processes. When multiple instances attempt to mount a Squashfs filesystem simultaneously, a race condition can occur, resulting in an incorrect block size being set to zero. This flaw may cause arithmetic operations on invalid configurations leading to critical system instability and potential data corruption. The issue has been addressed by implementing checks to ensure valid block sizes are returned, thereby enhancing overall system security.

References