A vulnerability was found in the Linux kernel, a double free vulnerability in the f_midi_set_alt function of drivers/usb/gadget/function/f_midi.c in the f_midi driver may allow attackers to cause a denial of service or possibly have unspecified other impact. Reference: https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.4 Upstream commit: https://github.com/torvalds/linux/commit/7fafcfdf6377b18b2a726ea554d6e593ba44349f https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7fafcfdf6377b18b2a726ea554d6e593ba44349f
Created kernel tracking bugs for this issue: Affects: fedora-all [bug 1743503]
This was fixed for Fedora in the 4.16.4 stable updates.
Mitigation: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Reproducer: No reproducer exists at this time.
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s): https://access.redhat.com/security/cve/cve-2018-20961