CVE-2022-49581: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: be2net: Fix buffer overflow in be_get_module_eeprom be_cmd_read_port_transceiver_data assumes that it is given a buffer that is at least PAGE_DATA_LEN long, or twice that if the module supports SFF 8472. However, this is not always the case. Fix this by passing the desired offset and length to be_cmd_read_port_transceiver_data so that we only copy the bytes once.

Affected products

• Linux Linux Kernel: from 3.18, before 4.9.325 (fixed in 4.9.325); from 4.10, before 4.14.290 (fixed in 4.14.290); from 4.15, before 4.19.254 (fixed in 4.19.254); from 4.20, before 5.4.208 (fixed in 5.4.208); from 5.5, before 5.10.134 (fixed in 5.10.134); from 5.11, before 5.15.58 (fixed in 5.15.58); …

Published 2025-02-26. Last modified 2026-08-04.