Hristo Venev

**Name of the Vulnerable Software and Affected Versions** Linux kernel (affected versions not specified) **Description** A buffer overflow issue has been identified in the Linux kernel, specifically in the be2net component. The `be cmd read port transceiver data` function assumes it is given a buffer of a certain length, but this is not always the case. This can lead to a buffer overflow. The issue is resolved by passing the desired offset and length to `be cmd read port transceiver data` to prevent excessive byte copying. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.