---
id: CVE-2022-50719
title: 'ALSA: line6: fix stack overflow in line6_midi_transmit'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ALSA: line6: fix stack overflow in line6_midi_transmit

  Correctly calculate available space including the size of the chunk
  buffer. This fixes a buffer overflow when mu…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= f2459201c72e8f8553644505eed19954d4c3a023 <
    b026af92b2cea907c780f7168c730c816cd33311
  - >-
    Linux >= f2459201c72e8f8553644505eed19954d4c3a023 <
    49cb7737e733013ec86aa77ed2e19b94a68eaa05
  - >-
    Linux >= f2459201c72e8f8553644505eed19954d4c3a023 <
    0c76087449ee4ed45a88b10017d02c6694caedb1
  - >-
    Linux >= f2459201c72e8f8553644505eed19954d4c3a023 <
    25e8c6ecb46843a955f254b8f0d77894e4a53dc4
  - >-
    Linux >= f2459201c72e8f8553644505eed19954d4c3a023 <
    66f359ad66d49f75d39ac729f9114dabf90b81bb
  - >-
    Linux >= f2459201c72e8f8553644505eed19954d4c3a023 <
    0c9118e381ff538874e00fd4e66a768273c150fb
  - >-
    Linux >= f2459201c72e8f8553644505eed19954d4c3a023 <
    61e4be4a60cc6de723f8c574ddbcb3025eb44cac
  - >-
    Linux >= f2459201c72e8f8553644505eed19954d4c3a023 <
    389d34c2a8b52acc351fd932ed4bea41fee5a39b
  - >-
    Linux >= f2459201c72e8f8553644505eed19954d4c3a023 <
    b8800d324abb50160560c636bfafe2c81001b66c
  - Linux 3.15
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-15T21:32:16.726459Z'
published: '2025-12-24'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T21:41:23.334Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2022-50719'
references:
  - url: 'https://git.kernel.org/stable/c/b026af92b2cea907c780f7168c730c816cd33311'
  - url: 'https://git.kernel.org/stable/c/49cb7737e733013ec86aa77ed2e19b94a68eaa05'
  - url: 'https://git.kernel.org/stable/c/0c76087449ee4ed45a88b10017d02c6694caedb1'
  - url: 'https://git.kernel.org/stable/c/25e8c6ecb46843a955f254b8f0d77894e4a53dc4'
  - url: 'https://git.kernel.org/stable/c/66f359ad66d49f75d39ac729f9114dabf90b81bb'
  - url: 'https://git.kernel.org/stable/c/0c9118e381ff538874e00fd4e66a768273c150fb'
  - url: 'https://git.kernel.org/stable/c/61e4be4a60cc6de723f8c574ddbcb3025eb44cac'
  - url: 'https://git.kernel.org/stable/c/389d34c2a8b52acc351fd932ed4bea41fee5a39b'
  - url: 'https://git.kernel.org/stable/c/b8800d324abb50160560c636bfafe2c81001b66c'
tags:
  - cve.org
epss: 0.00228
epssPercentile: 0.12596
ingestedAt: '2026-10-15T22:48:25.381Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ALSA: line6: fix stack overflow in line6_midi_transmit

Correctly calculate available space including the size of the chunk
buffer. This fixes a buffer overflow when multiple MIDI sysex
messages are sent to a PODxt device.

## Affected

- `Linux >= f2459201c72e8f8553644505eed19954d4c3a023 < b026af92b2cea907c780f7168c730c816cd33311`
- `Linux >= f2459201c72e8f8553644505eed19954d4c3a023 < 49cb7737e733013ec86aa77ed2e19b94a68eaa05`
- `Linux >= f2459201c72e8f8553644505eed19954d4c3a023 < 0c76087449ee4ed45a88b10017d02c6694caedb1`
- `Linux >= f2459201c72e8f8553644505eed19954d4c3a023 < 25e8c6ecb46843a955f254b8f0d77894e4a53dc4`
- `Linux >= f2459201c72e8f8553644505eed19954d4c3a023 < 66f359ad66d49f75d39ac729f9114dabf90b81bb`
- `Linux >= f2459201c72e8f8553644505eed19954d4c3a023 < 0c9118e381ff538874e00fd4e66a768273c150fb`
- `Linux >= f2459201c72e8f8553644505eed19954d4c3a023 < 61e4be4a60cc6de723f8c574ddbcb3025eb44cac`
- `Linux >= f2459201c72e8f8553644505eed19954d4c3a023 < 389d34c2a8b52acc351fd932ed4bea41fee5a39b`
- `Linux >= f2459201c72e8f8553644505eed19954d4c3a023 < b8800d324abb50160560c636bfafe2c81001b66c`
- `Linux 3.15`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.