CVE-2024-47747

A flaw was found in the Linux kernel's ether3 driver. A race condition exists between the ether3_probe and ether3_remove functions, where a timer initialized during device probing might still be active when the device is removed. This can lead to a use-after-free vulnerability, allowing a local attacker with low privileges to potentially corrupt memory, which could result in privilege escalation or arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.