In the Linux kernel, the following vulnerability has been resolved:
usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
While the MIDI jacks are configured correctly, and the MIDIStreaming endpoint descriptors are filled with the correct information, bNumEmbMIDIJack and bLength are set incorrectly in these descriptors.
This does not matter when the numbers of in and out ports are equal, but when they differ the host will receive broken descriptors with uninitialized stack memory leaking into the descriptor for whichever value is smaller.
The precise meaning of "in" and "out" in the port counts is not clearly defined and can be confusing. But elsewhere the driver consistently uses this to match the USB meaning of IN and OUT viewed from the host, so that "in" ports send data to the host and "out" ports receive data from it.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Mar 17, 2025 | Mar 7, 2025 |
| Suse | — | Upgrade dtb-broadcomUpgrade kernel-64kb-develUpgrade kernel-rt_debugUpgrade kernel-default-develUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade dtb-marvellUpgrade dtb-xilinxUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-azure-extraUpgrade cluster-md-kmp-rtUpgrade dtb-apmUpgrade kernel-default-vdsoUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-symsUpgrade dtb-amazonUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade dtb-socionextUpgrade dtb-amlogicUpgrade kernel-macrosUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-64kbUpgrade dtb-appleUpgrade kernel-debugUpgrade ocfs2-kmp-rtUpgrade kernel-debug-develUpgrade reiserfs-kmp-rtUpgrade dtb-renesasUpgrade kernel-develUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade dtb-amdUpgrade kernel-sourceUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade kernel-obs-qaUpgrade kernel-rt-develUpgrade kernel-default-livepatchUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-freescaleUpgrade dtb-lgUpgrade kernel-default-livepatch-develUpgrade kernel-syms-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-default-extraUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-syms-rtUpgrade kernel-rtUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade dtb-nvidiaUpgrade dtb-allwinnerUpgrade kernel-azureUpgrade dtb-caviumUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade dlm-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-develUpgrade dtb-sprdUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-optionalUpgrade kernel-azure-vdsoUpgrade kselftests-kmp-rtUpgrade kernel-source-rtUpgrade kernel-docsUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade dtb-qcomUpgrade dtb-rockchipUpgrade kernel-default-base-rebuildUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-obs-build | Dec 5, 2025 | Jun 12, 2025 |
| Ubuntu | — | Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oem-24.04bUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.4.0-216-lowlatencyUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1105-bluefieldUpgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-gkeop-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-5.4.0-216-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oemUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-5.4.0-1092-ibmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1015-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1146-awsUpgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-azure-lts-20.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-5.4.0-216-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-gke-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-5.4.0-1133-kvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-genericUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-bluefieldUpgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.4.0-1149-gcpUpgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-nvidiaUpgrade linux-image-oracleUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1129-raspiUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1149-gcp-fipsUpgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcp-fipsUpgrade linux-image-generic-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-azure-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcpUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-generic-64k-6.8Upgrade linux-image-5.4.0-1051-iotUpgrade linux-image-virtual-6.8Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-1076-ibmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-5.4.0-1144-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-6.8.0-78-genericUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-aws-64kUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1084-awsUpgrade linux-image-5.15.0-140-fipsUpgrade linux-image-5.15.0-140-genericUpgrade linux-image-generic-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-6.8.0-1035-awsUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-5.4.0-1064-xilinx-zynqmpUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azureUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-azure-cvmUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-1089-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-gke-6.8Upgrade linux-image-5.4.0-1120-fipsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1146-aws-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1034-azureUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-aws-lts-24.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-ibm-classicUpgrade linux-image-raspi-6.8Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-azure-fipsUpgrade linux-image-5.4.0-1151-azure-fipsUpgrade linux-image-5.4.0-1151-azureUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-intelUpgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-6.8.0-1033-ibm | May 20, 2025 | Mar 7, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 22, 2025 | Mar 7, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub