Linux Kernel be2net Buffer Overflow Vulnerability in EEPROM Module Handling

A buffer overflow vulnerability has been identified in the Linux kernel's be2net driver. The issue arises in the 'be_get_module_eeprom' function, which incorrectly assumes that it receives a buffer at least PAGE_DATA_LEN in size, or twice that if the module is SFF8472-compliant. This assumption is not always valid, leading to the potential overflow. The vulnerability can be exploited by manipulating the buffer size expectations during EEPROM module data reads, particularly transceiver data, creating a risk of memory corruption.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or memory corruption.