This vulnerability (CVE-2024-45778) involves a stack overflow in grub2 when reading BFS filesystems. A crafted BFS filesystem can cause an integer overflow or wraparound, leading to an uncontrolled loop and ultimately causing grub2 to crash. The CVSS 3.1 vector indicates local attack vector, high attack complexity, high privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, and high availability impact. The vendor advisory from Red Hat is available but does not explicitly confirm patch status in the provided excerpt.

The impact is a denial of service condition where grub2 may crash due to an uncontrolled loop caused by a stack overflow when processing a malicious BFS filesystem. There is no reported confidentiality or integrity impact. The vulnerability requires local access with high privileges and has a high attack complexity, limiting exploitation likelihood.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2024-45778 for current remediation guidance. No explicit patch or workaround information is provided in the available data. Until a fix is confirmed, avoid mounting or processing untrusted BFS filesystems with grub2.