The flaw in device-mapper-multipath allows a local user to trigger an out-of-bounds read by sending a command containing a format string that ends with a trailing percent character to the multipath daemon. This out-of-bounds read can expose unintended memory contents of the daemon, resulting in information disclosure. In addition, the same malformed command can cause the daemon to crash, creating a denial‑of‑service condition. The weakness is a classic instance of CWE‑125, an improper bounds checking vulnerability.

The affected products are Red Hat Enterprise Linux releases 6 through 10 and Red Hat OpenShift Container Platform 4, as identified by the vendor. All available system images within these releases are subject to the vulnerability.

The CVSS score of 5.1 indicates a moderate severity vulnerability. The EPSS score of less than 1% suggests that exploitation is currently unlikely, and the vulnerability is not listed in the CISA KEV catalog. The attack requires local user privilege and the ability to communicate with the multipath daemon, meaning it is a local‑user attack. Successful exploitation would allow the user to read sensitive data from the daemon or to disrupt device mapping services.