Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46

Description The issue is related to the ALSA usb-audio component, specifically concerning the handling of MIDI substreams. When closing a MIDI substream, pending work is not properly canceled, which may lead to potential security issues. The actual impact and attack plausibility have not yet been proven.

Recommendations For Linux Kernel versions prior to v5.15.46, update to version v5.15.46 or later to resolve the issue.