In the Linux kernel, the following vulnerability has been resolved:
ALSA: usb-audio: Kill timer properly at removal
The USB-audio MIDI code initializes the timer, but in a rare case, the
driver might be freed without the disconnect call. This leaves the
timer in an active state while the assigned object is released via
snd_usbmidi_free(), which ends up with a kernel warning when the debug
configuration is enabled, as spotted by fuzzer.
For avoiding the problem, put timer_shutdown_sync() at
snd_usbmidi_free(), so that the timer can be killed properly.
While we're at it, replace the existing timer_delete_sync() at the
disconnect callback with timer_shutdown_sync(), too.
Metrics
Affected Vendors & Products
No data.
No data.
No data.
References
History
Thu, 03 Jul 2025 09:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Kill timer properly at removal The USB-audio MIDI code initializes the timer, but in a rare case, the driver might be freed without the disconnect call. This leaves the timer in an active state while the assigned object is released via snd_usbmidi_free(), which ends up with a kernel warning when the debug configuration is enabled, as spotted by fuzzer. For avoiding the problem, put timer_shutdown_sync() at snd_usbmidi_free(), so that the timer can be killed properly. While we're at it, replace the existing timer_delete_sync() at the disconnect callback with timer_shutdown_sync(), too. | |
| Title | ALSA: usb-audio: Kill timer properly at removal | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: Linux
Published: 2025-07-03T08:35:15.301Z
Updated: 2025-07-03T08:35:15.301Z
Reserved: 2025-04-16T04:51:23.985Z
Link: CVE-2025-38105
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2025-07-03T09:15:23.997
Modified: 2025-07-03T15:13:53.147
Link: CVE-2025-38105
Redhat
No data.