CVE-2026-90022

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the f midi2 USB gadget driver. The function f midi2 opts str show() handles internal string locking, but its callers dereference the opts->info.<field> pointer before the function is called and before the lock is acquired. This creates a race condition with f midi2 opts str store(), which frees the old string under opts->lock during concurrent attribute writes. Consequently, the show path may read a pointer that is freed before the lock inside f midi2 opts str show() is taken.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.