NetSight
IP …
medium5.5

CVE-2025-21859

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: f_midi: f_midi_complete to call queue_work When using USB MIDI, a lock is atte…

Impact

In the Linux kernel, the following vulnerability has been resolved: USB: gadget: f_midi: f_midi_complete to call queue_work When using USB MIDI, a lock is attempted to be acquired twice through a re-entrant call to f_midi_transmit, causing a deadlock. Fix it by using queue_work() to schedule the inner f_midi_transmit() via a high priority work queue from the completion handler.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 3.2 before 6.1.130
from 6.2 before 6.6.80
from 6.7 before 6.12.17
from 6.13 before 6.13.5
Version 6.14

Weakness classification

CWE-667

References