CVE-2018-20961

In the Linux kernel before 4.16.4, a double free vulnerability in the f_midi_set_alt function of drivers/usb/gadget/function/f_midi.c in the f_midi driver may allow attackers to cause a denial of service or possibly have unspecified other impact.

• CWE-415

• http://packetstormsecurity.com/files/154228/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.htmlThird Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.htmlThird Party Advisory, VDB Entry
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.4Release Notes, Vendor Advisory
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7fafcfdf6377b18b2a726ea554d6e593ba44349fExploit, Mailing List, Vendor Advisory
• https://github.com/torvalds/linux/commit/7fafcfdf6377b18b2a726ea554d6e593ba44349fPatch, Third Party Advisory
• https://seclists.org/bugtraq/2019/Aug/48Mailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20190905-0002/Third Party Advisory
• https://support.f5.com/csp/article/K58502654Third Party Advisory
• https://support.f5.com/csp/article/K58502654?utm_source=f5support&amp%3Butm_medium=RSS
• https://usn.ubuntu.com/4145-1/Third Party Advisory
• http://packetstormsecurity.com/files/154228/Slackware-Security-Advisory-Slackware-14.2-kernel-Updates.htmlThird Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/154951/Kernel-Live-Patch-Security-Notice-LSN-0058-1.htmlThird Party Advisory, VDB Entry
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.16.4Release Notes, Vendor Advisory
• https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7fafcfdf6377b18b2a726ea554d6e593ba44349fExploit, Mailing List, Vendor Advisory
• https://github.com/torvalds/linux/commit/7fafcfdf6377b18b2a726ea554d6e593ba44349fPatch, Third Party Advisory
• https://seclists.org/bugtraq/2019/Aug/48Mailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20190905-0002/Third Party Advisory
• https://support.f5.com/csp/article/K58502654Third Party Advisory
• https://support.f5.com/csp/article/K58502654?utm_source=f5support&amp%3Butm_medium=RSS
• https://usn.ubuntu.com/4145-1/Third Party Advisory

Published

Aug 7, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-20956Swann SWWHD-INTCAM-HD devices leave the PSK in logs after a …
• CVE-2018-20957The Bluetooth Low Energy (BLE) subsystem on Tapplock devices…
• CVE-2018-20958The Bluetooth Low Energy (BLE) subsystem on Tapplock devices…
• CVE-2018-20959Jura E8 devices lack Bluetooth connection security.
• CVE-2018-2096Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2018-20960Nespresso Prodigio devices lack Bluetooth connection securit…
• CVE-2018-20962The Backpack\CRUD Backpack component before 3.4.9 for Larave…
• CVE-2018-20963The contact-form-to-email plugin before 1.2.66 for WordPress…
• CVE-2018-20964The contact-form-to-email plugin before 1.2.66 for WordPress…
• CVE-2018-20965The ultimate-member plugin before 2.0.4 for WordPress has XS…6.1
• CVE-2018-20966The woocommerce-jetpack plugin before 3.8.0 for WordPress ha…
• CVE-2018-20967The wp-ultimate-csv-importer plugin before 5.6.1 for WordPre…