In the Linux kernel before 5.17, an error path in dwc3_qcom_acpi_register_core in drivers/usb/dwc3/dwc3-qcom.c lacks certain platform_device_put and kfree calls. CREATE(Triage):(User=admin) CVE-2023-22995 (https://nvd.nist.gov/vuln/detail/CVE-2023-22995)