The perl-Module-ScanDeps module, which scans potential modules used by perl programs and returns a hash reference keyed by module names, contains a local privilege escalation vulnerability caused by unsanitized input (CVE-2024-10224). This vulnerability allows a local attacker to escalate privileges on affected systems. Red Hat has released a security update for Red Hat Enterprise Linux 9 and its CodeReady Linux Builder variants to mitigate this issue. The advisory references Red Hat Enterprise Linux 9.6 Release Notes for additional changes and provides guidance for applying the update.

The vulnerability allows local privilege escalation via unsanitized input in the perl-Module-ScanDeps module. This could enable a local attacker to gain elevated privileges on the affected system. The severity is rated as moderate by Red Hat Product Security. There are no known exploits in the wild at the time of the advisory.

Red Hat has released an official security update that addresses this vulnerability. Users should apply the update as described in the Red Hat advisory RHSA-2025:7350 and the linked article https://access.redhat.com/articles/11258. Applying this update mitigates the local privilege escalation risk. No additional mitigation steps are specified or required beyond applying the official patch.