Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
In the Linux kernel, the following vulnerability has been resolved: fs/xattr: missing fdput() in fremovexattr error path In the Linux kernel, the fremovexattr() syscall calls fdget() to acquire a file reference but returns early without calling fdput() when strncpy_from_user() fails on the name argument. In multi-threaded processes where fdget() takes the slow path, this permanently leaks one file reference per call, pinning the struct file and associated kernel objects in memory. An unprivileged local user can exploit this to cause kernel memory exhaustion. The issue was inadvertently fixed by commit a71874379ec8 ("xattr: switch to CLASS(fd)").
Priority
MEDIUM
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-09 | 3 | Disclosure1General1Patch1 |
| 2026-03-13 | 1 | PoC1 |
| 2026-03-16 | 1 | General1 |
| 2026-06-02 | 1 | Patch1 |
Here's the slopsploits for CVE-2024-14027 that were produced in roughly 2-3x the amount of time a human would have done it. As well as some thoughts/notes. https://github.com/lcfr-eth/CVE-2024-14027_slop/
Post summary
The post shares a GitHub repository containing a PoC/slop exploit for CVE‑2024‑14027, indicating automated generation of exploit code.
A CVE with actual text not provided by the commit description (since it was an Al Viro commit with no commit message): https://lore.kernel.org/linux-cve-announce/2026030917-CVE-2024-14027-5c00@gregkh/T/#u
Post summary
The note merely indicates a CVE was reported in the kernel commit, but provides no details, PoC, exploitation evidence, or patch information.
CVE-2024-14027 In the Linux kernel, the following vulnerability has been resolved: fs/xattr: missing fdput() in fremovexattr error path In the Linux kernel, the fremovexattr() sys… https://www.cve.org/CVERecord?id=CVE-2024-14027
Post summary
CVE-2024-14027, affecting the Linux kernel’s fremovexattr handling, has been fixed—patching the missing fdput() in the error path.
BREAKING: SUSE Linux Enterprise 16.0 ships kernel updates fixing 206 security issues, including CVE-2023-2058, CVE-2024-14027 and KVM, NVMe bugs rated important. https://threatcluster.io/cluster/suse-linux-kernel-updates-address-multiple-security-vulnerab-3131b205
Post summary
SUSE Linux Enterprise 16.0 releases kernel updates that address 206 security issues, including CVE-2023-2058 and CVE-2024-14027, thereby providing official patches for these vulnerabilities.
@Dinosn Claude Opus tackling kernel vulnerabilities like CVE-2024-14027 shows how much LLMs understand about memory corruption. https://vulntracker.io/cves/CVE-2024-14027
Post summary
The tweet notes that Claude Opus is addressing kernel memory‑corruption vulnerabilities like CVE‑2024‑14027, illustrating what LLMs can comprehend about such issues.
CVE-2024-14027 Linux Kernel Memory Leak via Unfreed File Reference in fremovexattr() Syscall https://vulmon.com/vulnerabilitydetails?qid=CVE-2024-14027
Post summary
This post announces the CVE‑2024‑14027 vulnerability, detailing a memory‑leak in the Linux kernel’s fremovexattr() syscall, with no evidence of exploits, patches, or active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |