{ "schema_version": "1.4.0", "id": "GHSA-j2r3-gxq6-3rp2", "modified": "2025-03-20T21:31:38Z", "published": "2023-03-01T21:30:18Z", "aliases": [ "CVE-2023-23000" ], "details": "In the Linux kernel before 5.17, drivers/phy/tegra/xusb.c mishandles the tegra_xusb_find_port_node return value. Callers expect NULL in the error case, but an error pointer is used.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-23000" }, { "type": "WEB", "url": "https://github.com/torvalds/linux/commit/045a31b95509c8f25f5f04ec5e0dec5cd09f2c5f" }, { "type": "WEB", "url": "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.17" }, { "type": "WEB", "url": "https://security.netapp.com/advisory/ntap-20230331-0004" } ], "database_specific": { "cwe_ids": [ "CWE-476" ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-03-01T19:15:00Z" } }