{"id":"CVE-2022-49581","summary":"be2net: Fix buffer overflow in be_get_module_eeprom","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nbe2net: Fix buffer overflow in be_get_module_eeprom\n\nbe_cmd_read_port_transceiver_data assumes that it is given a buffer that\nis at least PAGE_DATA_LEN long, or twice that if the module supports SFF\n8472. However, this is not always the case.\n\nFix this by passing the desired offset and length to\nbe_cmd_read_port_transceiver_data so that we only copy the bytes once.","modified":"2026-05-28T03:53:52.414092099Z","published":"2025-02-26T02:23:19.148Z","related":["SUSE-SU-2025:1027-1","SUSE-SU-2025:1176-1","SUSE-SU-2025:1183-1","SUSE-SU-2025:1241-1","SUSE-SU-2025:1293-1"],"database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49581.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/18043da94c023f3ef09c15017bdb04e8f695ef10"},{"type":"WEB","url":"https://git.kernel.org/stable/c/665cbe91de2f7c97c51ca8fce39aae26477c1948"},{"type":"WEB","url":"https://git.kernel.org/stable/c/8ff4f9df73e5c551a72ee6034886c17e8de6596d"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a5a8fc0679a8fd58d47aa2ebcfc5742631f753f9"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a8569f76df7ec5b4b51155c57523a0b356db5741"},{"type":"WEB","url":"https://git.kernel.org/stable/c/aba8ff847f4f927ad7a1a1ee4a9f29989a1a728f"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d7241f679a59cfe27f92cb5c6272cb429fb1f7ec"},{"type":"WEB","url":"https://git.kernel.org/stable/c/fe4473fc7940f14c4a12db873b9729134c212654"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49581.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-49581"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"e36edd9d26cf257511548edaf2b7a56eb4fed854"},{"fixed":"a5a8fc0679a8fd58d47aa2ebcfc5742631f753f9"},{"fixed":"fe4473fc7940f14c4a12db873b9729134c212654"},{"fixed":"8ff4f9df73e5c551a72ee6034886c17e8de6596d"},{"fixed":"a8569f76df7ec5b4b51155c57523a0b356db5741"},{"fixed":"665cbe91de2f7c97c51ca8fce39aae26477c1948"},{"fixed":"aba8ff847f4f927ad7a1a1ee4a9f29989a1a728f"},{"fixed":"18043da94c023f3ef09c15017bdb04e8f695ef10"},{"fixed":"d7241f679a59cfe27f92cb5c6272cb429fb1f7ec"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49581.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"3.18.0"},{"fixed":"4.9.325"}]},{"type":"ECOSYSTEM","events":[{"introduced":"4.10.0"},{"fixed":"4.14.290"}]},{"type":"ECOSYSTEM","events":[{"introduced":"4.15.0"},{"fixed":"4.19.254"}]},{"type":"ECOSYSTEM","events":[{"introduced":"4.20.0"},{"fixed":"5.4.208"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.5.0"},{"fixed":"5.10.134"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.58"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"5.18.15"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-49581.json"}}],"schema_version":"1.7.5"}