In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
While the MIDI jacks are configured correctly, and the MIDIStreaming endpoint descriptors are filled with the correct information, bNumEmbMIDIJack and bLength are set incorrectly in these descriptors.
This does not matter when the numbers of in and out ports are equal, but when they differ the host will receive broken descriptors with uninitialized stack memory leaking into the descriptor for whichever value is smaller.
The precise meaning of "in" and "out" in the port counts is not clearly defined and can be confusing. But elsewhere the driver consistently uses this to match the USB meaning of IN and OUT viewed from the host, so that "in" ports send data to the host and "out" ports receive data from it.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Mar 17, 2025 | Mar 7, 2025 |
| Suse | — | Upgrade dtb-apmUpgrade kselftests-kmp-64kbUpgrade kernel-macrosUpgrade kernel-develUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade kernel-symsUpgrade kernel-syms-rtUpgrade kernel-debugUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade dtb-appleUpgrade dtb-amlogicUpgrade kernel-default-vdsoUpgrade kernel-default-extraUpgrade ocfs2-kmp-azureUpgrade kernel-devel-azureUpgrade kselftests-kmp-defaultUpgrade kernel-devel-rtUpgrade dtb-socionextUpgrade dtb-armUpgrade dtb-xilinxUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-extraUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade kernel-default-livepatchUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-rtUpgrade dtb-amdUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kbUpgrade cluster-md-kmp-rtUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade dlm-kmp-azureUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade dtb-marvellUpgrade kernel-default-develUpgrade gfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade dtb-broadcomUpgrade kernel-64kb-develUpgrade kernel-default-optionalUpgrade kernel-obs-qaUpgrade dtb-lgUpgrade cluster-md-kmp-defaultUpgrade dtb-freescaleUpgrade kernel-rt_debugUpgrade dtb-rockchipUpgrade gfs2-kmp-defaultUpgrade dtb-qcomUpgrade kernel-azureUpgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-rtUpgrade gfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade reiserfs-kmp-azureUpgrade kernel-source-vanillaUpgrade kselftests-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-develUpgrade dtb-alteraUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-optionalUpgrade kernel-debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-default-baseUpgrade ocfs2-kmp-64kbUpgrade dtb-caviumUpgrade kernel-rtUpgrade dtb-allwinnerUpgrade kernel-obs-buildUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-rt-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-source-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-docs | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-5.4.0-1151-azureUpgrade linux-image-azure-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-5.4.0-1144-oracleUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-raspi2Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-raspi-6.8Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azure-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1084-awsUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-aws-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-raspiUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-ibm-classicUpgrade linux-image-oem-osp1Upgrade linux-image-raspi-realtimeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-oem-20.04dUpgrade linux-image-realtime-6.8.1Upgrade linux-image-5.4.0-1146-aws-fipsUpgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-140-genericUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-5.15.0-1089-azureUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-6.8.0-78-genericUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-5.4.0-1120-fipsUpgrade linux-image-5.4.0-1064-xilinx-zynqmpUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1035-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-awsUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-intelUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-5.4.0-1151-azure-fipsUpgrade linux-image-aws-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-140-fipsUpgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-5.4.0-1051-iotUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-azureUpgrade linux-image-gcp-fipsUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-5.4.0-216-generic-lpaeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-5.4.0-216-lowlatencyUpgrade linux-image-5.4.0-1105-bluefieldUpgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.11.0-1014-awsUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-5.4.0-1092-ibmUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-5.4.0-1133-kvmUpgrade linux-image-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-virtualUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidiaUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-bluefieldUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-216-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-oem-20.04Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-5.4.0-1149-gcpUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatencyUpgrade linux-image-aws-fipsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oemUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.11.0-1015-azureUpgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-oem-20.04bUpgrade linux-image-gke-5.15Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-azure-nvidiaUpgrade linux-image-5.4.0-1146-awsUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-aws-lts-20.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-5.4.0-1149-gcp-fips | May 20, 2025 | Mar 7, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Mar 7, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub