Not impossible, but very unlikely. CLFS isn’t remotely reachable, it's a kernel driver reached through local API calls and has no network listener. AFAIK the historical CLFS CVEs are all rated as local.

Are you finding these vulns with Mythos/Daybreak or some other tool? Chinese models perhaps?