CVE-2025-21859

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-21859
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-21859.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-21859
Downstream
Related
Published
2025-03-12T09:42:12.036Z
Modified
2026-05-07T04:16:35.158993Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
USB: gadget: f_midi: f_midi_complete to call queue_work
Details

In the Linux kernel, the following vulnerability has been resolved:

USB: gadget: fmidi: fmidicomplete to call queuework

When using USB MIDI, a lock is attempted to be acquired twice through a re-entrant call to fmiditransmit, causing a deadlock.

Fix it by using queuework() to schedule the inner fmidi_transmit() via a high priority work queue from the completion handler.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21859.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d5daf49b58661ec4af7a55b277176efbf945ca05
Fixed
727dee0857946b85232526de4f5a957fe163e89a
Fixed
1f10923404705a94891e612dff3b75e828a78368
Fixed
b09957657d7767d164b3432af2129bd72947553c
Fixed
24a942610ee9bafb2692a456ae850c5b2e409b05
Fixed
deeee3adb2c01eedab32c3b4519337689ad02e8a
Fixed
e9fec6f42c45db2f62dc373fb1a10d2488c04e79
Fixed
8aa6b4be1f4efccbfc533e6ec8841d26e4fa8dba
Fixed
4ab37fcb42832cdd3e9d5e50653285ca84d6686f

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-21859.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.2.0
Fixed
5.4.291
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.235
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.179
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.130
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.80
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.17
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.13.5

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-21859.json"