Use-After-Free Vulnerability in Linux Kernel's MIDI Driver

CVE-2026-64584

What is CVE-2026-64584?

A use-after-free vulnerability exists in the Linux kernel's f_midi driver, allowing potential exploitation through concurrent user-space operations. The f_midi driver, responsible for handling MIDI data, improperly manages a work item associated with the midi object. This flaw arises when the work item is not canceled prior to freeing the midi object, creating a risk of dereferencing the freed struct. In specific scenarios, a user-space write can queue the work even after the midi object is marked for release, potentially compromising system integrity. The vulnerability was identified through internal static analysis, emphasizing the importance of robust memory handling in driver implementations.

References