Lenovo Rescue and Recovery version 4.20 suffers from a heap overflow in the file system filter kernel driver which could allow an attacker to overwrite kernel memory leading to elevation of privilege.
b6cfc77e131af76632d4e48351d6e7633e6fa344597cae913e2e3a8ca80df110