PT-2021-7678 · Linux+6 · Linux Kernel+6

Published 2021-12-14 · Updated 2025-03-20 · CVE-2023-23000

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.17

Description The issue is related to the mishandling of the tegra xusb find port node return value in the Linux kernel's drivers/phy/tegra/xusb.c file. This can lead to a denial of service. The problem arises because callers expect NULL in the error case, but an error pointer is used instead.

Recommendations For versions prior to 5.17, update to version 5.17 or later to resolve the issue.

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

CWE-253

Related Identifiers

ALT-PU-2022-1647

ALT-PU-2022-1730

ALT-PU-2022-1768

ALT-PU-2022-2155

ALT-PU-2023-1684

ALT-PU-2023-1741

ALT-PU-2023-1814

ALT-PU-2023-4894

AZL-25319

AZL-25901

BDU:2023-01211

CVE-2023-23000

OPENSUSE-SU-2023_0774-1

OPENSUSE-SU-2023_2646-1

OPENSUSE-SU-2023_2871-1

SUSE-SU-2023:0749-1

SUSE-SU-2023:0749-2

SUSE-SU-2023:0774-1

SUSE-SU-2023:0778-1

SUSE-SU-2023:0779-1

SUSE-SU-2023:0780-1

SUSE-SU-2023:1608-1

SUSE-SU-2023:1609-1

SUSE-SU-2023:1710-1

SUSE-SU-2023:2646-1

SUSE-SU-2023:2809-1

SUSE-SU-2023:2871-1

USN-6701-1

USN-6701-2

USN-6701-3

USN-6701-4

USN-6702-1

USN-6702-2

USN-6704-1

USN-6704-2

USN-6704-3

USN-6704-4

USN-6705-1

USN-6716-1

Affected Products

Alt Linux

Debian

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 693

• https://github.com/torvalds/linux/commit/045a31b95509c8f25f5f04ec5e0dec5cd09f2c5f · Patch
• https://ubuntu.com/security/notices/USN-6702-2 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-23000 · Security Note
• https://ubuntu.com/security/CVE-2021-44879 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-23000 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2023:0778-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-0340 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-23004 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6701-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:1608-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-51782 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0779-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-4132 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0749-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-46838 · Vendor Advisory