CVE-2024-47675

CVE-2024-47675 is a use-after-free vulnerability in the Linux kernel's BPF subsystem, specifically within the bpf_uprobe_multi_link_attach() function. This flaw, rated High severity (CVSS 7.8), occurs when bpf_link_prime() fails, leading to the premature freeing of bpf_uprobe structures without proper unregistration, resulting in leaked uprobe objects and orphaned consumer entries. An attacker with local access could potentially exploit this to achieve high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.