CVE-2022-50719 — Sensitive Information Exposure in Linux

CWE-200 — Sensitive Information ExposureCWE-312 — Cleartext Storage of Sensitive Info8 documents7 sources
Severity
6.5MEDIUMGHSA
No vector
EPSS
0.1%
top 69.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedDec 24

Description

In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: fix stack overflow in line6_midi_transmit Correctly calculate available space including the size of the chunk buffer. This fixes a buffer overflow when multiple MIDI sysex messages are sent to a PODxt device.

Affected Packages4 packages

▶Linuxlinux/linux_kernel3.15.0 — 4.9.337+7
▶Debianlinux/linux_kernel< 5.10.178-1+3
▶CVEListV5linux/linuxf2459201c72e8f8553644505eed19954d4c3a023 — b026af92b2cea907c780f7168c730c816cd33311+9
▶debiandebian/linux< linux 6.1.4-1 (bookworm)

🔴Vulnerability Details

4
OSV
CVE-2022-50719: In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: fix stack overflow in line6_midi_transmit Correctly calculate availab↗2025-12-24
▶
OSV
ALSA: line6: fix stack overflow in line6_midi_transmit↗2025-12-24
▶
GHSA
GHSA-j6jv-hgrf-2v93: In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: fix stack overflow in line6_midi_transmit Correctly calculate avail↗2025-12-24
▶
GHSA
Solr search discloses password hashes of all users↗2023-12-16
▶

📋Vendor Advisories

2
Red Hat
kernel: ALSA: line6: fix stack overflow in line6_midi_transmit↗2025-12-24
▶
Debian
CVE-2022-50719: linux - In the Linux kernel, the following vulnerability has been resolved: ALSA: line6...↗2022
▶

🕵️Threat Intelligence

1
Wiz
CVE-2022-50719 Impact, Exploitability, and Mitigation Steps | Wiz↗
▶