CVE-2023-22999

—

CVSS 3.1

5.5 medium

EPSS

<1%p18

Published

Feb 28, 2023 (Feb 28, 2023)

Modified

Jun 17, 2026

Description

In the Linux kernel before 5.16.3, drivers/usb/dwc3/dwc3-qcom.c misinterprets the dwc3_qcom_create_urs_usb_platdev return value (expects it to be NULL in the error case, whereas it is actually an error pointer).

Vendors: linux
Products: linux kernel
Weakness: CWE-476
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.