THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-64584 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_midi: cancel pending IN work before freeing the midi object The f_midi driver embeds a work item (midi->work) whose handler, f_midi_in_work(), dereferences the enclosing struct f_midi through con

[NVD] CVE-2026-64584 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_midi: cancel pending IN work before freeing the midi object The f_midi driver embeds a work item (midi->work) whose handler, f_midi_in_work(), dereferences the enclosing struct f_midi through con

mednvdPublished 2026-08-06

CVE-2026-64584 CVSS: 7.8 HIGH Published: 2026-08-06T08:16:33.543

In the Linux kernel, the following vulnerability has been resolved:

usb: gadget: f_midi: cancel pending IN work before freeing the midi object

The f_midi driver embeds a work item (midi->work) whose handler, f_midi_in_work(), dereferences the enclosing struct f_midi through container_of(). This work is armed from two sites: f_mid

Indicators of compromise

CVE-2026-64584cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-64584