CVE-2024-47742

A flaw was found in the Linux kernel's firmware loader. This vulnerability allows a local attacker or a semi-privileged user to perform a path traversal attack by providing a specially crafted firmware name containing directory traversal sequences. Successful exploitation could lead to unauthorized access to or manipulation of files outside the intended directory, potentially resulting in privilege escalation or system compromise, impacting confidentiality, integrity, and availability of the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.