CVE-2022-49581: linux kernel from 3.18 (inclusive), before 4.9.325 (exclusive), from 4.10 (inclusive), before 4.14.290 (exclusive)…

Affected technology

linux kernel · from 3.18 (inclusive), before 4.9.325 (exclusive)
linux

linux kernel · from 4.10 (inclusive), before 4.14.290 (exclusive)
linux

linux kernel · from 4.15 (inclusive), before 4.19.254 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.208 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.134 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.58 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 5.18.15 (exclusive)
linux

linux kernel · 5.19 · update rc1
linux

linux kernel · 5.19 · update rc2
linux

linux kernel · 5.19 · update rc3
linux

linux kernel · 5.19 · update rc4
linux

linux kernel · 5.19 · update rc5
linux

linux kernel · 5.19 · update rc6
linux

linux kernel · 5.19 · update rc7
linux

Linux · e36edd9d26cf257511548edaf2b7a56eb4fed854 to before a5a8fc0679a8fd58d47aa2ebcfc5742631f753f9, e36edd9d26cf257511548edaf2b7a56eb4fed854 to before fe4473fc7940f14c4a12db873b9729134c212654, e36edd9d26cf257511548edaf2b7a56eb4fed854 to before 8ff4f9df73e5c551a72ee6034886c17e8de6596d, e36edd9d26cf257511548edaf2b7a56eb4fed854 to before a8569f76df7ec5b4b51155c57523a0b356db5741, e36edd9d26cf257511548edaf2b7a56eb4fed854 to before 665cbe91de2f7c97c51ca8fce39aae26477c1948, e36edd9d26cf257511548edaf2b7a56eb4fed854 to before aba8ff847f4f927ad7a1a1ee4a9f29989a1a728f, e36edd9d26cf257511548edaf2b7a56eb4fed854 to before 18043da94c023f3ef09c15017bdb04e8f695ef10, e36edd9d26cf257511548edaf2b7a56eb4fed854 to before d7241f679a59cfe27f92cb5c6272cb429fb1f7ec
Linux

Linux · 3.18
Linux

Component: Not specified by the source
File: drivers/net/ethernet/emulex/benet/be_cmds.c, drivers/net/ethernet/emulex/benet/be_cmds.h, drivers/net/ethernet/emulex/benet/be_ethtool.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.