CVE-2023-22995: High severity Linux Linux kernel vulnerability
In the Linux kernel before 5.17, an error path in dwc3qcomacpiregistercore in drivers/usb/dwc3/dwc3-qcom.c lacks certain platformdeviceput and kfree calls.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in 5.17
Event History
Frequently Asked Questions
What is the severity of CVE-2023-22995?
CVE-2023-22995 is classified as a vulnerability in the Linux kernel that could lead to potential memory leaks.
How do I fix CVE-2023-22995?
To mitigate CVE-2023-22995, update to the Linux kernel version 5.17 or later.
Which versions of the Linux kernel are affected by CVE-2023-22995?
CVE-2023-22995 affects the Linux kernel versions prior to 5.17.
What is the impact of CVE-2023-22995 on system performance?
CVE-2023-22995 may cause performance degradation due to memory leaks in affected systems.
Is there a patch available for CVE-2023-22995?
Yes, patches are included in Linux kernel versions 5.17 and later.