A high-severity use-after-free vulnerability in the Linux kernel USB f_midi driver could allow a local attacker to achieve system compromise.

The f_midi driver fails to properly cancel and synchronize pending work items before freeing the midi object. This race condition allows a local user with low privileges to trigger a use-after-free scenario by accessing the rawmidi interface during device teardown.

Successful exploitation of this vulnerability allows a local attacker to execute arbitrary code with kernel-level privileges. Given the CVSS score of 7.8, this flaw represents a significant risk to system integrity, confidentiality, and availability. Compromise of the kernel typically results in full system takeover, rendering standard user-level security controls ineffective.

Immediate Action: Apply the relevant stable kernel update for your distribution (e.g., 5.10.265, 5.15.216, 6.1.183, or 6.6.148) and reboot the system to load the patched kernel.

Proactive Monitoring: Monitor system logs for kernel oops or segmentation faults, particularly those associated with usb or midi subsystems, which may indicate attempted exploitation.

Compensating Controls: Restrict access to the physical USB subsystem or rawmidi device nodes to authorized users only, effectively limiting the attack surface for local, low-privileged actors.

Public Exploit Available: No (exploit_available: false)

This vulnerability represents a critical risk to kernel stability and security. Administrators should prioritize patching the Linux kernel across all affected environments as part of the next scheduled maintenance window. Given that kernel-level exploits are often used to bypass secondary security layers, immediate remediation is strongly advised to prevent potential privilege escalation.