cve 2024 32020

CVE-2024-32020 is a security vulnerability in Git's local clone optimization. When a repository is cloned locally on the same filesystem, Git creates hardlinks to objects in the source repository. These hardlinks remain writable by the original repository owner, allowing an untrusted user who controls the source to modify objects in the clone. Microsoft's advisory notes that Azure Linux includes the affected Git library and is potentially impacted. The vulnerability highlights a risk in Git's performance-enhancing behavior, particularly in multi-user environments where local clones are used. Discussions on WindowsForum cover the technical details, implications for Azure Linux, and mitigation strategies.