CVE-2025-21859
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Mar 12, 2025
Updated: Mar 13, 2025
CWE ID 667
Summary
CVE-2025-21859 is a vulnerability affecting the Linux kernel's USB MIDI functionality. When using USB MIDI, a re-entrant call to the function f_midi_transmit results in a deadlock due to a failed attempt to acquire a lock twice. This issue has been mitigated by scheduling the inner f_midi_transmit() function via a high priority work queue from the completion handler, using queue_work() instead.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.