CVE-2023-23002
Summary
| CVE | CVE-2023-23002 |
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-03-01 20:15:00 UTC |
| Updated | 2023-03-13 15:02:00 UTC |
| Description | In the Linux kernel before 5.16.3, drivers/bluetooth/hci_qca.c misinterprets the devm_gpiod_get_index_optional return value (expects it to be NULL in the error case, whereas it is actually an error pointer). |
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|
| Operating System |
Linux |
Linux Kernel |
All |
All |
All |
All |
References
| Reference | Source | Link | Tags |
|---|
| Bluetooth: hci_qca: Fix NULL vs IS_ERR_OR_NULL check in qca_serdev_probe · torvalds/linux@6845667 · GitHub |
MISC |
github.com |
|
| cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3 |
MISC |
cdn.kernel.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 181708 Debian Security Update for linux (CVE-2023-23002)
- 906661 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (25610-3)
- 906709 Common Base Linux Mariner (CBL-Mariner) Security Update for kernel (25616-1)