CVE-2025-21859 USB: gadget: f_midi: f_midi_complete to call queue_work

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple USB Gadget Vulnerabilities Reported by Microsoft Two vulnerabilities in USB gadget drivers have been reported by Microsoft. CVE-2025-21859, published on March 12, 2025, involves the f_midi driver, while CVE-2024-58055, published on March 6, 2025, pertains to the f_tcm driver. Affected systems may experience issues related to these drivers. 2 sources 39