CVE-2026-98770

The Linux kernel contains a vulnerability in the usb gadget midi2 component. Specifically, the jack_ins and jack_outs descriptor arrays in struct f_midi2_usb_config were incorrectly sized to MAX_CABLES. Because entries are added from both inputs and outputs during loop cycles, the arrays actually...

CVE-2026-98770 usb: gadget: midi2: Fix the jack descriptor array sizes

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: midi2: Fix the jack descriptor array sizes The jack in/out descriptor arrays in struct fmidi2usbconfig have the size of MAXCABLES, which look reasonable -- but it turned out to be incorrect. Namely, the entries for...

CVE-2026-98770

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: midi2: Fix the jack descriptor array sizes The jack in/out descriptor arrays in struct fmidi2usbconfig have the size of MAXCABLES, which look reasonable -- but it turned out to be incorrect. Namely, the entries for...