Medium · published March 12, 2025
In the Linux kernel, the following vulnerability has been resolved:
USB: gadget: f_midi: f_midi_complete to call queue_work
When using USB MIDI, a lock is attempted to be acquired twice through a
re-entrant call to f_midi_transmit, causing a deadlock.
Fix it by using queue_work() to schedule the inner f_midi_transmit() via
a high priority work queue from the completion handler.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 3.2, < 6.1.130 | 6.1.130 |
| linux/linux_kernel | ≥ 6.2, < 6.6.80 | 6.6.80 |
| linux/linux_kernel | ≥ 6.7, < 6.12.17 | 6.12.17 |
| linux/linux_kernel | ≥ 6.13, < 6.13.5 | 6.13.5 |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |