Acknowledged                
                
            
            
                
                    Created: Oct 29, 2025   
                                            Updated: Oct 30, 2025                                    
                
                    
                                    
             
         
        
            
            
                
                
                                    
                        Found In Version: 10.25.33.1                    
                
                
                                        
                            Severity: Standard                        
                    
                                        
                            Applicable for: Wind River Linux LTS 25                        
                    
                                    
                        Component/s: Kernel                    
                
                
                             
         
                        
                In the Linux kernel, the following vulnerability has been resolved:[EOL][EOL]Squashfs: fix uninit-value in squashfs_get_parent[EOL][EOL]Syzkaller reports a "KMSAN: uninit-value in squashfs_get_parent" bug.[EOL][EOL]This is caused by open_by_handle_at() being called with a file handle[EOL]containing an invalid parent inode number.  In particular the inode number[EOL]is that of a symbolic link, rather than a directory.[EOL][EOL]Squashfs_get_parent() gets called with that symbolic link inode, and[EOL]accesses the parent member field.[EOL][EOL]\tunsigned int parent_ino = squashfs_i(inode)->parent;[EOL][EOL]Because non-directory inodes in Squashfs do not have a parent value, this[EOL]is uninitialised, and this causes an uninitialised value access.[EOL][EOL]The fix is to initialise parent with the invalid inode 0, which will cause[EOL]an EINVAL error to be returned.[EOL][EOL]Regular inodes used to share the parent field with the block_list_start[EOL]field.  This is removed in this commit to enable the parent field to[EOL]contain the invalid inode number 0.