Linux Kernel Vulnerability in Midi2 Gadget Configuration

CVE-2026-89735

What is CVE-2026-89735?

In the Linux kernel, the midi2 gadget experiences a resource leak due to the absence of cleanup for default configfs child groups during function teardown. The function f_midi2_alloc_inst() allocates these groups but fails to remove them when necessary, resulting in leaked structures and unfreed resources. The implementation of configfs_remove_default_groups() in the relevant teardown processes will ensure that resources are properly released, thus enhancing system stability and security.

References