CVE-2022-50719ALSA: line6: fix stack overflow in line6_midi_transmit
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: fix stack overflow in line6_midi_transmit Correctly calculate available space including the size of the chunk buffer. This fixes a buffer overflow when multiple MIDI sysex messages are sent to a PODxt device.
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Deferred
- Record last updated
- Oct 15, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from f2459201c72e8f8553644505eed19954d4c3a023 before b026af92b2cea907c780f7168c730c816cd33311; from f2459201c72e8f8553644505eed19954d4c3a023 before 49cb7737e733013ec86aa77ed2e19b94a68eaa05; from f2459201c72e8f8553644505eed19954d4c3a023 before 0c76087449ee4ed45a88b10017d02c6694caedb1; from f2459201c72e8f8553644505eed19954d4c3a023 before 25e8c6ecb46843a955f254b8f0d77894e4a53dc4; from f2459201c72e8f8553644505eed19954d4c3a023 before 66f359ad66d49f75d39ac729f9114dabf90b81bb; from f2459201c72e8f8553644505eed19954d4c3a023 before 0c9118e381ff538874e00fd4e66a768273c150fb; from f2459201c72e8f8553644505eed19954d4c3a023 before 61e4be4a60cc6de723f8c574ddbcb3025eb44cac; from f2459201c72e8f8553644505eed19954d4c3a023 before 389d34c2a8b52acc351fd932ed4bea41fee5a39b; and 1 more ranges | CNA record |
References
- https://git.kernel.org/stable/c/b026af92b2cea907c780f7168c730c816cd33311
- https://git.kernel.org/stable/c/49cb7737e733013ec86aa77ed2e19b94a68eaa05
- https://git.kernel.org/stable/c/0c76087449ee4ed45a88b10017d02c6694caedb1
- https://git.kernel.org/stable/c/25e8c6ecb46843a955f254b8f0d77894e4a53dc4
- https://git.kernel.org/stable/c/66f359ad66d49f75d39ac729f9114dabf90b81bb
- https://git.kernel.org/stable/c/0c9118e381ff538874e00fd4e66a768273c150fb
- https://git.kernel.org/stable/c/61e4be4a60cc6de723f8c574ddbcb3025eb44cac
- https://git.kernel.org/stable/c/389d34c2a8b52acc351fd932ed4bea41fee5a39b
- https://git.kernel.org/stable/c/b8800d324abb50160560c636bfafe2c81001b66c
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.