PT-2025-8514 · Linux+2 · Linux Kernel+2

Hristo Venev · Published 2022-07-19 · Updated 2025-04-16 · CVE-2022-49581

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A buffer overflow issue has been identified in the Linux kernel, specifically in the be2net component. The be cmd read port transceiver data function assumes it is given a buffer of a certain length, but this is not always the case. This can lead to a buffer overflow. The issue is resolved by passing the desired offset and length to be cmd read port transceiver data to prevent excessive byte copying.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-119

CWE-120

Related Identifiers

BDU:2026-03698

CVE-2022-49581

OESA-2025-1317

RHSA-2026:1494

RHSA-2026:1495

SUSE-SU-2025:1027-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_1027-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1293-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1520

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/49xxx/CVE-2022-49581.json · Exploit
• https://git.kernel.org/stable/c/aba8ff847f4f927ad7a1a1ee4a9f29989a1a728f · Patch
• https://git.kernel.org/stable/c/a8569f76df7ec5b4b51155c57523a0b356db5741 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49581 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49608 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49155 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49315 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49532 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1027-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-49581 · Vendor Advisory
• https://git.kernel.org/stable/c/fe4473fc7940f14c4a12db873b9729134c212654 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1293-1 · Vendor Advisory
• https://git.kernel.org/stable/c/18043da94c023f3ef09c15017bdb04e8f695ef10 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49725 · Security Note
• https://bdu.fstec.ru/vul/2026-03698 · Security Note