CVE-2024-43824: Linux kernel · PCI: endpoint: pci-epf-test: Make use of cached 'epc_features' in
Affects Linux kernelSource GCVE Database
Not known to be exploited.
Data as of 30 Oct 2026, 15:19 UTC
Rated Low by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
Thin evidence
One scorer or noneExploitation evidence
Disclosed: evidence found.
CVE published 17 Aug 2024
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.
What to do
AI-suggested
The vulnerability has been resolved in the Linux kernel by applying the patch that uses the cached 'epc_features' and removes redundant NULL checks. Users should update to the fixed kernel version once available. No additional mitigation steps are required as the issue does not pose a direct security risk.
Description
This vulnerability in the Linux kernel's PCI endpoint function pci-epf-test involved redundant NULL pointer checks for the 'epc_features' structure. The issue was addressed by using a cached value instead of repeatedly calling the API and removing unnecessary NULL checks, which were previously thought to cause a NULL pointer dereference. The fix eliminates a false positive warning and improves code correctness.
References
- git.kernel.org/stable/c/5c71be3476088ab490d48a468b54d791f91241b8 (opens in a new tab)
- git.kernel.org/stable/c/97cee643a825808711cc78475fd61a30824b7a0f (opens in a new tab)
- git.kernel.org/stable/c/af4ad016abb1632ff7ee598a6037952b495e5b80 (opens in a new tab)
- git.kernel.org/stable/c/5a5095a8bd1bd349cce1c879e5e44407a34dda8a (opens in a new tab)