CVE-2022-50719

Summary

In the Linux kernel, the following vulnerability has been resolved:

ALSA: line6: fix stack overflow in line6_midi_transmit

Correctly calculate available space including the size of the chunk buffer. This fixes a buffer overflow when multiple MIDI sysex messages are sent to a PODxt device.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxf2459201c72e8f8553644505eed19954d4c3a023 < b026af92b2cea907c780f7168c730c816cd33311affected
LinuxLinuxf2459201c72e8f8553644505eed19954d4c3a023 < 49cb7737e733013ec86aa77ed2e19b94a68eaa05affected
LinuxLinuxf2459201c72e8f8553644505eed19954d4c3a023 < 0c76087449ee4ed45a88b10017d02c6694caedb1affected
LinuxLinuxf2459201c72e8f8553644505eed19954d4c3a023 < 25e8c6ecb46843a955f254b8f0d77894e4a53dc4affected
LinuxLinuxf2459201c72e8f8553644505eed19954d4c3a023 < 66f359ad66d49f75d39ac729f9114dabf90b81bbaffected
LinuxLinuxf2459201c72e8f8553644505eed19954d4c3a023 < 0c9118e381ff538874e00fd4e66a768273c150fbaffected
LinuxLinuxf2459201c72e8f8553644505eed19954d4c3a023 < 61e4be4a60cc6de723f8c574ddbcb3025eb44cacaffected
LinuxLinuxf2459201c72e8f8553644505eed19954d4c3a023 < 389d34c2a8b52acc351fd932ed4bea41fee5a39baffected
LinuxLinuxf2459201c72e8f8553644505eed19954d4c3a023 < b8800d324abb50160560c636bfafe2c81001b66caffected
LinuxLinux3.15affected
LinuxLinux0 < 3.15unaffected
LinuxLinux4.9.337 <= 4.9.*unaffected
LinuxLinux4.14.303 <= 4.14.*unaffected
LinuxLinux4.19.270 <= 4.19.*unaffected
LinuxLinux5.4.229 <= 5.4.*unaffected
LinuxLinux5.10.163 <= 5.10.*unaffected
LinuxLinux5.15.87 <= 5.15.*unaffected
LinuxLinux6.0.17 <= 6.0.*unaffected
LinuxLinux6.1.3 <= 6.1.*unaffected
LinuxLinux6.2 <= *unaffected

Weaknesses

References