CVE-2022-50719

ALSA: line6: fix stack overflow in line6_midi_transmit

State: Published
Severity: 7.8 High
Published: Dec 24, 2025
Updated: Oct 15, 2026
Reserved: Dec 24, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ALSA: line6: fix stack overflow in line6_midi_transmit

Correctly calculate available space including the size of the chunk buffer. This fixes a buffer overflow when multiple MIDI sysex messages are sent to a PODxt device.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	f2459201c72e8f8553644505eed19954d4c3a023 to before b026af92b2cea907c780f7168c730c816cd33311Affected f2459201c72e8f8553644505eed19954d4c3a023 to before 49cb7737e733013ec86aa77ed2e19b94a68eaa05Affected f2459201c72e8f8553644505eed19954d4c3a023 to before 0c76087449ee4ed45a88b10017d02c6694caedb1Affected f2459201c72e8f8553644505eed19954d4c3a023 to before 25e8c6ecb46843a955f254b8f0d77894e4a53dc4Affected f2459201c72e8f8553644505eed19954d4c3a023 to before 66f359ad66d49f75d39ac729f9114dabf90b81bbAffected f2459201c72e8f8553644505eed19954d4c3a023 to before 0c9118e381ff538874e00fd4e66a768273c150fbAffected f2459201c72e8f8553644505eed19954d4c3a023 to before 61e4be4a60cc6de723f8c574ddbcb3025eb44cacAffected f2459201c72e8f8553644505eed19954d4c3a023 to before 389d34c2a8b52acc351fd932ed4bea41fee5a39bAffected f2459201c72e8f8553644505eed19954d4c3a023 to before b8800d324abb50160560c636bfafe2c81001b66cAffected
LinuxLinux	3.15Affected before 3.15Not affected 4.9.337 through 4.9.Not affected 4.14.303 through 4.14.Not affected 4.19.270 through 4.19.Not affected 5.4.229 through 5.4.Not affected 5.10.163 through 5.10.Not affected 5.15.87 through 5.15.Not affected 6.0.17 through 6.0.Not affected 6.1.3 through 6.1.Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

f2459201c72e8f8553644505eed19954d4c3a023 to before b026af92b2cea907c780f7168c730c816cd33311Affected
f2459201c72e8f8553644505eed19954d4c3a023 to before 49cb7737e733013ec86aa77ed2e19b94a68eaa05Affected
f2459201c72e8f8553644505eed19954d4c3a023 to before 0c76087449ee4ed45a88b10017d02c6694caedb1Affected
f2459201c72e8f8553644505eed19954d4c3a023 to before 25e8c6ecb46843a955f254b8f0d77894e4a53dc4Affected
f2459201c72e8f8553644505eed19954d4c3a023 to before 66f359ad66d49f75d39ac729f9114dabf90b81bbAffected
f2459201c72e8f8553644505eed19954d4c3a023 to before 0c9118e381ff538874e00fd4e66a768273c150fbAffected
f2459201c72e8f8553644505eed19954d4c3a023 to before 61e4be4a60cc6de723f8c574ddbcb3025eb44cacAffected
f2459201c72e8f8553644505eed19954d4c3a023 to before 389d34c2a8b52acc351fd932ed4bea41fee5a39bAffected
f2459201c72e8f8553644505eed19954d4c3a023 to before b8800d324abb50160560c636bfafe2c81001b66cAffected

LinuxLinux

3.15Affected
before 3.15Not affected
4.9.337 through 4.9.*Not affected
4.14.303 through 4.14.*Not affected
4.19.270 through 4.19.*Not affected
5.4.229 through 5.4.*Not affected
5.10.163 through 5.10.*Not affected
5.15.87 through 5.15.*Not affected
6.0.17 through 6.0.*Not affected
6.1.3 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.