Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2022-49581

be2net: Fix buffer overflow in be_get_module_eeprom

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: be2net: Fix buffer overflow in be_get_module_eeprom be_cmd_read_port_transceiver_data assumes that it is given a buffer that is at least PAGE_DATA_LEN long, or twice that if the module supports SFF 8472. However, this is not always the case. Fix this by passing the desired offset and length to be_cmd_read_port_transceiver_data so that we only copy the bytes once.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e36edd9d26cf257511548edaf2b7a56eb4fed854 to < a5a8fc0679a8fd58d47aa2ebcfc5742631f753f9affected
  • e36edd9d26cf257511548edaf2b7a56eb4fed854 to < fe4473fc7940f14c4a12db873b9729134c212654affected
  • e36edd9d26cf257511548edaf2b7a56eb4fed854 to < 8ff4f9df73e5c551a72ee6034886c17e8de6596daffected
  • e36edd9d26cf257511548edaf2b7a56eb4fed854 to < a8569f76df7ec5b4b51155c57523a0b356db5741affected
  • e36edd9d26cf257511548edaf2b7a56eb4fed854 to < 665cbe91de2f7c97c51ca8fce39aae26477c1948affected
  • e36edd9d26cf257511548edaf2b7a56eb4fed854 to < aba8ff847f4f927ad7a1a1ee4a9f29989a1a728faffected
  • e36edd9d26cf257511548edaf2b7a56eb4fed854 to < 18043da94c023f3ef09c15017bdb04e8f695ef10affected
  • e36edd9d26cf257511548edaf2b7a56eb4fed854 to < d7241f679a59cfe27f92cb5c6272cb429fb1f7ecaffected

Linux Linux

Default version status: affected

  • 3.18affected
  • 0 to < 3.18unaffected
  • 4.9.325 to ≤ 4.9.*unaffected
  • 4.14.290 to ≤ 4.14.*unaffected
  • 4.19.254 to ≤ 4.19.*unaffected
  • 5.4.208 to ≤ 5.4.*unaffected
  • 5.10.134 to ≤ 5.10.*unaffected
  • 5.15.58 to ≤ 5.15.*unaffected
  • 5.18.15 to ≤ 5.18.*unaffected
  • 5.19 to ≤ *unaffected

References