CVE-2026-64584

The CVE concerns the Linux kernel usb gadget f_midi: a work item (midi->work) could dereference a freed f_midi when a pending IN work was not cancelled before f_midi_free() freed the object. The work can be armed by f_midi_complete() and f_midi_in_trigger(), and f_midi_disable() / f_midi_unbin...