usb midi

CVE-2026-64584 fixes a use-after-free flaw in Linux’s legacy USB MIDI gadget function, f_midi, but its real exposure is far narrower than the CVSS 7.8 rating suggests: the affected system must be configured to act as a USB MIDI device, not merely use a USB MIDI controller or keyboard. The...