{"id":"CVE-2025-21859","revision":"a206bf0f475349a38f5ef5e02c582403","records":[{"revision":"a206bf0f475349a38f5ef5e02c582403","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-21859","aliases":[],"title":"USB: gadget: f_midi: f_midi_complete to call queue_work","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: gadget: f_midi: f_midi_complete to call queue_work\n\nWhen using USB MIDI, a lock is attempted to be acquired twice through a\nre-entrant call to f_midi_transmit, causing a deadlock.\n\nFix it by using queue_work() to schedule the inner f_midi_transmit() via\na high priority work queue from the completion handler.","state":0,"publishedAt":"2025-03-12T09:42:12.036+00:00","modifiedAt":"2026-10-15T01:04:49.576+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/usb/gadget/function/f_midi.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"d5daf49b58661ec4af7a55b277176efbf945ca05\",\n                            \"lessThan\": \"727dee0857946b85232526de4f5a957fe163e89a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d5daf49b58661ec4af7a55b277176efbf945ca05\",\n                            \"lessThan\": \"1f10923404705a94891e612dff3b75e828a78368\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d5daf49b58661ec4af7a55b277176efbf945ca05\",\n                            \"lessThan\": \"b09957657d7767d164b3432af2129bd72947553c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d5daf49b58661ec4af7a55b277176efbf945ca05\",\n                            \"lessThan\": \"24a942610ee9bafb2692a456ae850c5b2e409b05\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d5daf49b58661ec4af7a55b277176efbf945ca05\",\n                            \"lessThan\": \"deeee3adb2c01eedab32c3b4519337689ad02e8a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d5daf49b58661ec4af7a55b277176efbf945ca05\",\n                            \"lessThan\": \"e9fec6f42c45db2f62dc373fb1a10d2488c04e79\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d5daf49b58661ec4af7a55b277176efbf945ca05\",\n                            \"lessThan\": \"8aa6b4be1f4efccbfc533e6ec8841d26e4fa8dba\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d5daf49b58661ec4af7a55b277176efbf945ca05\",\n                            \"lessThan\": \"4ab37fcb42832cdd3e9d5e50653285ca84d6686f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"drivers/usb/gadget/function/f_midi.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"3.2\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"3.2\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.291\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.235\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.179\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.130\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.80\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.17\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.13.5\",\n                            \"lessThanOrEqual\": \"6.13.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.14\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/727dee0857946b85232526de4f5a957fe163e89a","https://git.kernel.org/stable/c/1f10923404705a94891e612dff3b75e828a78368","https://git.kernel.org/stable/c/b09957657d7767d164b3432af2129bd72947553c","https://git.kernel.org/stable/c/24a942610ee9bafb2692a456ae850c5b2e409b05","https://git.kernel.org/stable/c/deeee3adb2c01eedab32c3b4519337689ad02e8a","https://git.kernel.org/stable/c/e9fec6f42c45db2f62dc373fb1a10d2488c04e79","https://git.kernel.org/stable/c/8aa6b4be1f4efccbfc533e6ec8841d26e4fa8dba","https://git.kernel.org/stable/c/4ab37fcb42832cdd3e9d5e50653285ca84d6686f"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-21859","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-21859","identifiers":["CVE-2025-21859"]},"retained":false,"historicalAffected":[]}],"coverage":[]}