CVE-2023-23000

Updated: 2025-08-20 03:03:17.827196

Description:

In the Linux kernel before 5.17, drivers/phy/tegra/xusb.c mishandles the tegra_xusb_find_port_node return value. Callers expect NULL in the error case, but an error pointer is used.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x MEDIUM 5.5

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 5.5 MEDIUM Ignored 2023-11-21 04:11:58 This flaw is confined to the NVIDIA Tegra XUSB PHY driver and is only reachable on Tegra SoC systems...
CentOS 6 ELS kernel 2.6.32 5.5 MEDIUM Not Vulnerable 2023-04-12 08:48:35
CentOS 7 ELS kernel 3.10.0 5.5 MEDIUM Ignored 2023-09-19 05:07:28 Ignored due to low severity
CentOS 8.4 ELS kernel 4.18.0 5.5 MEDIUM Not Vulnerable 2023-04-28 03:33:59
CentOS 8.5 ELS kernel 4.18.0 5.5 MEDIUM Not Vulnerable 2023-04-13 11:05:22
CloudLinux 6 ELS kernel 2.6.32 5.5 MEDIUM Not Vulnerable 2023-04-12 08:48:35
Oracle Linux 6 ELS kernel 2.6.32 5.5 MEDIUM Not Vulnerable 2023-04-12 08:48:35
Ubuntu 16.04 ELS linux-hwe 4.15.0 5.5 MEDIUM Released CLSA-2023:1689788960 2023-07-19 14:07:24
Ubuntu 16.04 ELS linux 4.4.0 5.5 MEDIUM Not Vulnerable 2024-04-01 04:57:02
Ubuntu 18.04 ELS linux 4.15.0 5.5 MEDIUM Released CLSA-2023:1693429208 2023-08-30 17:09:40