CVE-2024-42301

An array out-of-bounds flaw was found in dev/parport in the Linux kernel. This issue may result in a crash.

This vulnerability is rated as Moderate severity because exploitation requires local access and relies on the parallel port subsystem being active on the system. An unprivileged local user interacting with the parport procfs interface can trigger a kernel panic, causing a denial of service or potential memory corruption. Modern enterprise server and cloud deployments rarely utilize parallel port devices or load the driver by default, which significantly restricts practical risk.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.