LiveActive security incident?Get immediate response
CVE Record

CVE-2024-43896: ASoC: cs-amp-lib: Fix NULL pointer crash if efi.get_variable is NULL

In the Linux kernel, the following vulnerability has been resolved: ASoC: cs-amp-lib: Fix NULL pointer crash if efi.get_variable is NULL Call efi_rt_services_supported() to check that efi.get_variable exists before calling it.

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysismoderate

Security readout for executives and security teams

Plain-English summary

CVE-2024-43896 is a Linux kernel reliability flaw in an audio amplifier support library. On some EFI configurations, the kernel could dereference a missing EFI function pointer and crash. The business risk is primarily system availability, not confirmed data theft or remote compromise.

Executive priority

Treat as a normal kernel maintenance priority unless affected systems support critical operations. There is no cited evidence of active exploitation, but kernel crashes can cause service disruption. Patch through standard Linux update channels after confirming exposure.

Technical view

The Linux ASoC cs-amp-lib code called efi.get_variable without first confirming the EFI runtime service was available. The upstream fix adds an efi_rt_services_supported() check before use. Public data does not provide CVSS, CWE, or a complete distribution-specific affected matrix.

Likely exposure

Exposure appears limited to Linux systems running affected kernel versions with the relevant ASoC cs-amp-lib path and EFI runtime conditions where efi.get_variable is NULL. The source bundle lists Linux kernel 6.9, 6.10.5, and 6.11-related version data, but distribution backports may differ.

Exploitation context

No active exploitation is indicated by KEV or the provided sources. The documented failure mode is a NULL pointer crash, suggesting denial of service or local reliability impact. The public references do not describe a remote attack path or weaponized exploit.

Researcher notes

Evidence is sparse. The core issue and fix are clear from kernel stable references, but public metadata lacks CVSS, CWE, detailed prerequisites, and distro-specific version mapping. Avoid assuming exploitability beyond the documented NULL pointer crash.

Mitigation direction

  • Update to a Linux kernel containing the referenced stable fixes.
  • Check your Linux distribution’s advisory for backported fixed packages.
  • Prioritize systems where uptime is critical and EFI-based boot is used.
  • If immediate update is impossible, follow vendor guidance for temporary risk reduction.

Validation and detection

  • Inventory Linux kernel versions across affected assets.
  • Check whether the referenced stable commits are present or backported.
  • Review distribution security advisories for CVE-2024-43896 status.
  • Monitor kernel logs for related NULL pointer crashes in cs-amp-lib paths.
Prepared
Confidence
medium
Sources
4

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2024-43896 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
3Timeline events
1ADP providers
3Source links

SSVC decision data

CISA-ADPCISA Coordinator
Timestamp
Version
2.0.3
Exploitation: noneAutomatable: noTechnical Impact: partial

Vulnerability timeline

Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.

  1. CVE reservedCVE Program

    The CVE ID was reserved by the assigning CNA.

  2. CVE publishedCVE Program

    The CVE record was published.

  3. CVE updatedCVE Program

    The CVE record metadata indicates this as the latest update time.

ADP provider summaries

CISA-ADPCISA ADP Vulnrichment
other:ssvc

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
LinuxLinux1cad8725f2b98965ed3658bc917090b30adb14fa, 1cad8725f2b98965ed3658bc917090b30adb14faunaffected
LinuxLinux6.9, 0, 6.10.5, 6.11affected
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.