CVE-2022-49581

CVE-2022-49581 is a buffer overflow vulnerability in the Linux kernel's be2net driver, specifically within the be_get_module_eeprom function, affecting Linux kernel versions. This flaw arises because the be_cmd_read_port_transceiver_data function incorrectly assumes a minimum buffer size, leading to potential out-of-bounds writes. Rated with a CVSS score of 7.8 (High), it presents a local attack vector with low complexity, allowing an authenticated attacker to achieve high confidentiality, integrity, and availability impacts. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.