Back
CVE-2022-50719
ALSA: line6: fix stack overflow in line6_midi_transmit
High7.8EPSS 0.23%
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: fix stack overflow in line6_midi_transmit Correctly calculate available space including the size of the chunk buffer. This fixes a buffer overflow when multiple MIDI sysex messages are sent to a PODxt device.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| NVDNVD · Deferred | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.23% · top 86% of all CVEs (6 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Affected products
- affected f2459201c72e8f8553644505eed19954d4c3a023 – < b026af92b2cea907c780f7168c730c816cd33311
- affected f2459201c72e8f8553644505eed19954d4c3a023 – < 49cb7737e733013ec86aa77ed2e19b94a68eaa05
- affected f2459201c72e8f8553644505eed19954d4c3a023 – < 0c76087449ee4ed45a88b10017d02c6694caedb1
- affected f2459201c72e8f8553644505eed19954d4c3a023 – < 25e8c6ecb46843a955f254b8f0d77894e4a53dc4
- affected f2459201c72e8f8553644505eed19954d4c3a023 – < 66f359ad66d49f75d39ac729f9114dabf90b81bb
- affected f2459201c72e8f8553644505eed19954d4c3a023 – < 0c9118e381ff538874e00fd4e66a768273c150fb
- affected f2459201c72e8f8553644505eed19954d4c3a023 – < 61e4be4a60cc6de723f8c574ddbcb3025eb44cac
- affected f2459201c72e8f8553644505eed19954d4c3a023 – < 389d34c2a8b52acc351fd932ed4bea41fee5a39b
- affected f2459201c72e8f8553644505eed19954d4c3a023 – < b8800d324abb50160560c636bfafe2c81001b66c
- affected 3.15
- unaffected < 3.15
- unaffected 4.9.337 – ≤ 4.9.*
- unaffected 4.14.303 – ≤ 4.14.*
- unaffected 4.19.270 – ≤ 4.19.*
- unaffected 5.4.229 – ≤ 5.4.*
- unaffected 5.10.163 – ≤ 5.10.*
- unaffected 5.15.87 – ≤ 5.15.*
- unaffected 6.0.17 – ≤ 6.0.*
- unaffected 6.1.3 – ≤ 6.1.*
- unaffected 6.2 – ≤ *
References (9)
- https://git.kernel.org/stable/c/b026af92b2cea907c780f7168c730c816cd33311 (opens in a new tab)
- https://git.kernel.org/stable/c/49cb7737e733013ec86aa77ed2e19b94a68eaa05 (opens in a new tab)
- https://git.kernel.org/stable/c/0c76087449ee4ed45a88b10017d02c6694caedb1 (opens in a new tab)
- https://git.kernel.org/stable/c/25e8c6ecb46843a955f254b8f0d77894e4a53dc4 (opens in a new tab)
- https://git.kernel.org/stable/c/66f359ad66d49f75d39ac729f9114dabf90b81bb (opens in a new tab)
- https://git.kernel.org/stable/c/0c9118e381ff538874e00fd4e66a768273c150fb (opens in a new tab)
- https://git.kernel.org/stable/c/61e4be4a60cc6de723f8c574ddbcb3025eb44cac (opens in a new tab)
- https://git.kernel.org/stable/c/389d34c2a8b52acc351fd932ed4bea41fee5a39b (opens in a new tab)
- https://git.kernel.org/stable/c/b8800d324abb50160560c636bfafe2c81001b66c (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2022-50719)Record last updated .