Linux Kernel Memory Management Vulnerability in USB Gadget f_midi Module

CVE-2026-90021

What is CVE-2026-90021?

A memory management vulnerability in the Linux kernel's USB gadget f_midi module arises due to improper initialization of work structures in the f_midi_alloc function. This can lead to a scenario where the related work is not initialized, resulting in warnings when flushed. The issue is addressed by ensuring that the initialization of work is performed directly in f_midi_alloc, preventing potential runtime errors.

References