Linux Kernel USB-Audio Timer Management Vulnerability

A vulnerability in the Linux kernel's USB-audio MIDI code has been addressed. The issue arose because the timer was initialized but, in rare cases, the driver could be freed without a proper disconnect call. This left the timer active while the associated object was released, leading to a kernel warning in debug mode. The vulnerability has been resolved by ensuring the timer is properly shut down before the object is freed. Additionally, the timer management at the disconnect callback has been improved.

Impact

The vulnerability could lead to a kernel warning due to improper timer management, potentially causing confusion or issues in a debugging context.