---
id: CVE-2022-49581
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  be2net: Fix buffer overflow in be_get_module_eeprom

  be_cmd_read_port_transceiver_data assumes that it is given a buffer that
  is at least PAGE_DATA_LEN long, or twice t…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  be2net: Fix buffer overflow in be_get_module_eeprom

  be_cmd_read_port_transceiver_data assumes that it is given a buffer that
  is at least PAGE_DATA_LEN long, or twice t…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-787
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 3.18, < 4.9.325'
  - 'linux_kernel >= 4.10, < 4.14.290'
  - 'linux_kernel >= 4.15, < 4.19.254'
  - 'linux_kernel >= 4.20, < 5.4.208'
  - 'linux_kernel >= 5.5, < 5.10.134'
  - 'linux_kernel >= 5.11, < 5.15.58'
  - 'linux_kernel >= 5.16, < 5.18.15'
  - linux_kernel = 5.19
patched:
  - linux_kernel 5.18.15
published: '2025-02-26'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T22:17:24.680'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2022-49581'
references:
  - url: 'https://git.kernel.org/stable/c/18043da94c023f3ef09c15017bdb04e8f695ef10'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/665cbe91de2f7c97c51ca8fce39aae26477c1948'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/8ff4f9df73e5c551a72ee6034886c17e8de6596d'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/a5a8fc0679a8fd58d47aa2ebcfc5742631f753f9'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/a8569f76df7ec5b4b51155c57523a0b356db5741'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/aba8ff847f4f927ad7a1a1ee4a9f29989a1a728f'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/d7241f679a59cfe27f92cb5c6272cb429fb1f7ec'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/fe4473fc7940f14c4a12db873b9729134c212654'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.0031
epssPercentile: 0.23679
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-15T21:18:08.826441Z'
ingestedAt: '2026-10-15T21:45:11.288Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

be2net: Fix buffer overflow in be_get_module_eeprom

be_cmd_read_port_transceiver_data assumes that it is given a buffer that
is at least PAGE_DATA_LEN long, or twice that if the module supports SFF
8472. However, this is not always the case.

Fix this by passing the desired offset and length to
be_cmd_read_port_transceiver_data so that we only copy the bytes once.

## Affected

- `linux_kernel >= 3.18, < 4.9.325`
- `linux_kernel >= 4.10, < 4.14.290`
- `linux_kernel >= 4.15, < 4.19.254`
- `linux_kernel >= 4.20, < 5.4.208`
- `linux_kernel >= 5.5, < 5.10.134`
- `linux_kernel >= 5.11, < 5.15.58`
- `linux_kernel >= 5.16, < 5.18.15`
- `linux_kernel = 5.19`

## Remediation

Upgrade past the affected range:

- `linux_kernel 5.18.15`