Code execution via trailing-CR submodule path confusion

Code execution in affected Git releases allows remote authenticated users to run a hook through a recursive submodule clone. Git fails to quote a trailing carriage return when writing configuration values, then strips it on read, changing the submodule path so a symlink can redirect checkout into the hooks directory. Exploitation requires a crafted submodule path, an existing symlink to that hooks directory, an executable post-checkout hook, and user interaction to clone recursively.