Back to search
CVE-2025-21859
Published: Mar 12, 2025
Modified: May 12, 2026
PUBLISHED
Description
In the Linux kernel, the following vulnerability has been resolved: USB: gadget: f_midi: f_midi_complete to call queue_work When using USB MIDI, a lock is attempted to be acquired twice through a re-entrant call to f_midi_transmit, causing a deadlock. Fix it by using queue_work() to schedule the inner f_midi_transmit() via a high priority work queue from the completion handler.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected d5daf49b58661ec4af7a55b277176efbf945ca05 - < 727dee0857946b85232526de4f5a957fe163e89aaffected d5daf49b58661ec4af7a55b277176efbf945ca05 - < 1f10923404705a94891e612dff3b75e828a78368affected d5daf49b58661ec4af7a55b277176efbf945ca05 - < b09957657d7767d164b3432af2129bd72947553caffected d5daf49b58661ec4af7a55b277176efbf945ca05 - < 24a942610ee9bafb2692a456ae850c5b2e409b05affected d5daf49b58661ec4af7a55b277176efbf945ca05 - < deeee3adb2c01eedab32c3b4519337689ad02e8a+3 more versions |
Linux | Linux | affected 3.2unaffected 0 - < 3.2unaffected 5.4.291 - <= 5.4.*unaffected 5.10.235 - <= 5.10.*unaffected 5.15.179 - <= 5.15.*+5 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now