CVE-2024-41014

FAUCET Score

CVE-2024-41014 is an out-of-bounds read vulnerability in the Linux kernel's XFS filesystem, specifically within the xlog_recover_process_data function. This flaw arises from insufficient bounds checking when processing xlog_op_header entries during log recovery. An authenticated local attacker could craft a malicious XFS image to trigger this vulnerability, leading to information disclosure and potential denial of service. While rated as HIGH severity (CVSS 7.1), there is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

Vendor	Product	Version(s)	CPE
		< 6.1.120CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 6.2, < 6.6.64CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::
		>= 6.7, < 6.11CPE matchmatch criteria	cpe:2.3:o:linux:linux_kernel::::::::

CVSS Data

CVSS version used by this source: 3.1

7.1HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

Exploitability Score

1.8

Impact Score

5.2

CvssVersion

3.1

Exploit Intelligence

EPSS Score

0.22%

Probability of exploitation in next 30 days

EPSS Percentile

13.1%

Percentile rank of EPSS score among Peer Group

As of 2026-07-27

Model: v2026.06.15

This CVE's current EPSS score of 0.0022 is in the 43rd percentile among its peer group of 17,070 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (44)

autodeskpatch availablevia llm_extracted

View patch

freepbxpatch availablevia llm_extracted

View patch

honeywellpatch availablevia llm_extracted

View patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: kernel-rt-0:5.14.0-284.95.1.rt14.380.el9_2

View patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: kernel-rt-0:4.18.0-553.22.1.rt7.363.el8_10

View patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.8 Extended Update SupportFixed in: kernel-0:4.18.0-477.81.1.el8_8

View patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update SupportFixed in: kernel-0:4.18.0-372.121.1.el8_6

View patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Telecommunications Update ServiceFixed in: kernel-0:4.18.0-372.121.1.el8_6

View patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8.6 Update Services for SAP SolutionsFixed in: kernel-0:4.18.0-372.121.1.el8_6

View patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 8Fixed in: kernel-0:4.18.0-553.22.1.el8_10

View patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9Fixed in: kernel-0:5.14.0-427.42.1.el9_4

View patch

redhatpatch availablevia redhat_api

Product: Red Hat Enterprise Linux 9.2 Extended Update SupportFixed in: kernel-0:5.14.0-284.95.1.el9_2

View patch