In the Linux kernel before 5.16.3, drivers/usb/dwc3/dwc3-qcom.c
misinterprets the dwc3_qcom_create_urs_usb_platdev return value (expects it
to be NULL in the error case, whereas it is actually an error pointer).
cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.3
git.kernel.org/linus/b52fe2dbb3e655eb1483000adfab68a219549e13
github.com/torvalds/linux/commit/b52fe2dbb3e655eb1483000adfab68a219549e13
launchpad.net/bugs/cve/CVE-2023-22999
nvd.nist.gov/vuln/detail/CVE-2023-22999
security-tracker.debian.org/tracker/CVE-2023-22999
www.cve.org/CVERecord?id=CVE-2023-22999