Use-After-Free Vulnerability in Linux Kernel USB Gadget f_midi2

CVE-2026-90022

What is CVE-2026-90022?

A use-after-free vulnerability exists in the Linux Kernel's USB Gadget module, specifically within the f_midi2 component. The issue arises when the function f_midi2_opts_str_show() accesses a pointer to a string attribute before the associated lock is acquired. This race condition can allow a concurrently running f_midi2_opts_str_store() function to free the string while it is still being read, potentially leading to system instability and security risks. The vulnerability has been addressed by modifying f_midi2_opts_str_show() to correctly handle locks and pointer dereferencing.

References