EUVD-2026-56343

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-62688 Windows MIDI Service Module Elevation of Privileges Vulnerability

...

Windows MIDI Service Module Elevation of Privileges Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

Windows MIDI Service Module Elevation of Privileges Vulnerability

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

PT-2026-70457

Name of the Vulnerable Software and Affected Versions Windows MIDI Service Module affected versions not specified Description A heap-based buffer overflow occurs in the Windows MIDI Service Module. This issue allows an authorized attacker to elevate privileges locally on the system. A heap-based...

CVE-2026-62693: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

CVE-2026-62688: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally...

PT-2026-70460

Name of the Vulnerable Software and Affected Versions Windows MIDI Service Module affected versions not specified Description A race condition occurs in the Windows MIDI Service Module due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate...

usb: gadget: f_midi: cancel pending IN work before freeing the midi object

...

SUSE CVE-2026-64584

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: cancel pending IN work before freeing the midi object The fmidi driver embeds a work item midi-work whose handler, fmidiinwork, dereferences the enclosing struct fmidi through containerof. This work is armed...

UBUNTU-CVE-2026-64584

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: cancel pending IN work before freeing the midi object The fmidi driver embeds a work item midi-work whose handler, fmidiinwork, dereferences the enclosing struct fmidi through containerof. This work is armed...

CVE-2026-64584 usb: gadget: f_midi: cancel pending IN work before freeing the midi object

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: cancel pending IN work before freeing the midi object The fmidi driver embeds a work item midi-work whose handler, fmidiinwork, dereferences the enclosing struct fmidi through containerof. This work is armed...

CVE-2026-64584

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: cancel pending IN work before freeing the midi object The fmidi driver embeds a work item midi-work whose handler, fmidiinwork, dereferences the enclosing struct fmidi through containerof. This work is armed...

EUVD-2026-53771

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: cancel pending IN work before freeing the midi object The fmidi driver embeds a work item midi-work whose handler, fmidiinwork, dereferences the enclosing struct fmidi through containerof. This work is armed...

CVE-2026-64584

Summary (CVE-2026-64584): Linux kernel usb gadget f_midi vulnerability. The f_midi driver’s work item (midi->work) can be dereferenced after the midi object is freed because cancellation is not performed by f_midi_disable()/f_midi_unbind(), allowing a use-after-free if a concurrent userspace w...

CVE-2026-64584

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fmidi: cancel pending IN work before freeing the midi object The fmidi driver embeds a work item midi-work whose handler, fmidiinwork, dereferences the enclosing struct fmidi through containerof. This work is armed...

ROS-20260804-73-0039

The vulnerability of the sndusbmidifree function in the sound/usb/midi.c module of Linux kernel systems is related to incorrect initialization of the resource. Exploiting this vulnerability can allow attackers to cause service failures...

PT-2026-64712

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A Use-After-Free UAF issue exists in the ALSA usx2y driver for us144mkii devices. The tascam disconnect function cancels capture work and midi in work before calling usb kill anchored...

OESA-2026-3166 fluidsynth security update

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...

OESA-2026-3167 fluidsynth security update

FluidSynth is a free software synthesizer. Its currently based on the SoundFont 2 specifications and supports real time MIDI effect controls. It can be used as a shared library for embedding in other applications, can play MIDI files and has a command line shell. Many other applications use...