CVE-2024-47747

CVE-2024-47747 is a use-after-free vulnerability in the Linux kernel's ether3 driver, affecting Linux kernel versions. This flaw, rated High severity (CVSS 7.0), arises from a race condition during module or device removal, where the ether3_ledoff timer callback can attempt to access freed memory, potentially leading to system compromise (CWE-416). While the attack complexity is high and requires local access, successful exploitation could result in significant impact to confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.