CVE-2023-54321

A NULL pointer dereference was found in the driver core's device_add() function. When dpm_sysfs_add() fails after bus_add_device() succeeds, the error path attempts to remove the driver binding that was never completed, causing a crash.

This crash requires device registration to fail at a specific point, typically due to sysfs errors or resource exhaustion. The affected code path is in core driver infrastructure but requires unusual failure conditions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.