Skip to content
Heist/ feed
High

be2net: Fix buffer overflow in be_get_module_eeprom

Type: advisorySource: Official CVE List1 source record

In the Linux kernel, the following vulnerability has been resolved: be2net: Fix buffer overflow in be_get_module_eeprom be_cmd_read_port_transceiver_data assumes that it is given a buffer that is at least PAGE_DATA_LEN long, or twice that if the module supports SFF 8472. However, this is not always the case. Fix this by passing the desired offset and length to be_cmd_read_port_transceiver_data so that we only copy the bytes once.

Announced Group revision 1
Original source ↗

CVE-2022-49581

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2022-49581

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "e36edd9d26cf257511548edaf2b7a56eb4fed854",
        "lessThan": "a5a8fc0679a8fd58d47aa2ebcfc5742631f753f9",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "e36edd9d26cf257511548edaf2b7a56eb4fed854",
        "lessThan": "fe4473fc7940f14c4a12db873b9729134c212654",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "e36edd9d26cf257511548edaf2b7a56eb4fed854",
        "lessThan": "8ff4f9df73e5c551a72ee6034886c17e8de6596d",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "e36edd9d26cf257511548edaf2b7a56eb4fed854",
        "lessThan": "a8569f76df7ec5b4b51155c57523a0b356db5741",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "e36edd9d26cf257511548edaf2b7a56eb4fed854",
        "lessThan": "665cbe91de2f7c97c51ca8fce39aae26477c1948",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "e36edd9d26cf257511548edaf2b7a56eb4fed854",
        "lessThan": "aba8ff847f4f927ad7a1a1ee4a9f29989a1a728f",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "e36edd9d26cf257511548edaf2b7a56eb4fed854",
        "lessThan": "18043da94c023f3ef09c15017bdb04e8f695ef10",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "e36edd9d26cf257511548edaf2b7a56eb4fed854",
        "lessThan": "d7241f679a59cfe27f92cb5c6272cb429fb1f7ec",
        "versionType": "git"
      }
    ],
    "programFiles": [
      "drivers/net/ethernet/emulex/benet/be_cmds.c",
      "drivers/net/ethernet/emulex/benet/be_cmds.h",
      "drivers/net/ethernet/emulex/benet/be_ethtool.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "3.18"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "3.18",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "4.9.325",
        "versionType": "semver",
        "lessThanOrEqual": "4.9.*"
      },
      {
        "status": "unaffected",
        "version": "4.14.290",
        "versionType": "semver",
        "lessThanOrEqual": "4.14.*"
      },
      {
        "status": "unaffected",
        "version": "4.19.254",
        "versionType": "semver",
        "lessThanOrEqual": "4.19.*"
      },
      {
        "status": "unaffected",
        "version": "5.4.208",
        "versionType": "semver",
        "lessThanOrEqual": "5.4.*"
      },
      {
        "status": "unaffected",
        "version": "5.10.134",
        "versionType": "semver",
        "lessThanOrEqual": "5.10.*"
      },
      {
        "status": "unaffected",
        "version": "5.15.58",
        "versionType": "semver",
        "lessThanOrEqual": "5.15.*"
      },
      {
        "status": "unaffected",
        "version": "5.18.15",
        "versionType": "semver",
        "lessThanOrEqual": "5.18.*"
      },
      {
        "status": "unaffected",
        "version": "5.19",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "drivers/net/ethernet/emulex/benet/be_cmds.c",
      "drivers/net/ethernet/emulex/benet/be_cmds.h",
      "drivers/net/ethernet/emulex/benet/be_ethtool.c"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2022-49581

Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event
#30187 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement

Revision history

  1. CVE-2022-49581 · Revision 1Source updated