CVE-2024-47701

CVE-2024-47701 is a use-after-free vulnerability in the Linux kernel's ext4 filesystem. It occurs when the e_value_offs field of an inlined directory entry is modified externally, leading to an out-of-bounds access during directory lookups. This flaw affects Linux kernel versions utilizing the ext4 filesystem. The vulnerability carries a CVSS score of 7.8 (High), indicating a significant risk. It is a local attack (AV:L) with low attack complexity (AC:L) and requires low privileges (PR:L). Successful exploitation could lead to high impact on confidentiality, integrity, and availability (C:H/I:H/A:H). Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage for this CVE are minimal, suggesting it has not yet garnered widespread attention.