Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2025-21835— usb: gadget: f_midi: fix MIDI Streaming descriptor lengths

EPSS 0.03% · P9
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2025-21835

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
usb: gadget: f_midi: fix MIDI Streaming descriptor lengths
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_midi: fix MIDI Streaming descriptor lengths While the MIDI jacks are configured correctly, and the MIDIStreaming endpoint descriptors are filled with the correct information, bNumEmbMIDIJack and bLength are set incorrectly in these descriptors. This does not matter when the numbers of in and out ports are equal, but when they differ the host will receive broken descriptors with uninitialized stack memory leaking into the descriptor for whichever value is smaller. The precise meaning of "in" and "out" in the port counts is not clearly defined and can be confusing. But elsewhere the driver consistently uses this to match the USB meaning of IN and OUT viewed from the host, so that "in" ports send data to the host and "out" ports receive data from it.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于MIDI Streaming描述符长度设置不正确。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux c8933c3f79568263c90a46f06cf80419e6c63c97 ~ 3a983390d14e8498f303fc5cb23ab7d696b815db -
LinuxLinux 3.2 -

II. Public POCs for CVE-2025-21835

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-21835

请登录查看更多情报信息。

Same Patch Batch · Linux · 2025-03-07 · 8 CVEs total

CVE-2025-21836io_uring/kbuf: reallocate buf lists on upgrade
CVE-2025-21838usb: gadget: core: flush gadget workqueue after device removal
CVE-2025-21839KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop
CVE-2025-21840thermal/netlink: Prevent userspace segmentation fault by adjusting UAPI header
CVE-2025-21841cpufreq/amd-pstate: Fix cpufreq_policy ref counting
CVE-2025-21842amdkfd: properly free gang_ctx_bo when failed to init user queue
CVE-2025-21843drm/panthor: avoid garbage value in panthor_ioctl_dev_query()

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2025-21835

No comments yet

Leave a comment