Fedora 44 : linux-firmware (2026-c53019ed4f)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##
# The descriptive text and package checks in this plugin were
# extracted from Fedora Security Advisory FEDORA-2026-c53019ed4f
#

include('compat.inc');

if (description)
{
  script_id(335102);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/08/13");
  script_xref(name:"FEDORA", value:"2026-c53019ed4f");

  script_name(english:"Fedora 44 : linux-firmware (2026-c53019ed4f)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Fedora host is missing one or more security updates.");
  script_set_attribute(attribute:"description", value:
"The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the
FEDORA-2026-c53019ed4f advisory.

    Update to 20260810:

    * amdgpu: numerous firmware updates
    * update firmware for MT7922 WiFi device
    * morsemicro: add firmware for mm8108 support
    * ath10k: WCN3990 hw1.0: update board-2.bin
    * Update firmware for an8811hb 2.5G ethernet phy
    * xe: Update GUC to v70.72.1 for BMG, LNL, PTL, NVL-S
    * mediatek MT7922: update bluetooth firmware to 20260724143815
    * airoha: update AN7583 NPU firmwares to version 0.5
    * qcom: Add gpu firmwares for Eliza chipset
    * cirrus: cs35l57: Add firmware for Cirrus Amps for some Samsung laptops
    * rtw89: 8922d: add fw 0.35.113.2
    * qcom: venus-5.4: fix vp9 decoder assertion failure
    * qla2xxx: Add ql2900_fw.bin firmware for 29xx adapters
    * qcom: Update qdsp6sw firmware for shikra platform
    * amdgpu: DMCUB updates for various ASICs
    * intel_vpu: Update NPU firmware
    * qcom: Update DSP firmware for qcs8300 platform
    * tas2783: Add firmware for new soundwire devices
    * rtw88: add firmware v41.0.0 for RTL8723B
    * Update AMD cpu microcode
    * Add firmware file for Intel BlazarIW
    * Update firmware file for Intel BlazarI/BlazarU/Scorpius core
    * amdgpu: DMCUB updates for various ASICs
    * qcom: add ADSP firmware for hawi platform
    * powervr: add firmware for Imagination Technologies BXM-4-64 GPU
    * qcom: Update DSP firmware for sa8775p platform
    * xe: Release GuC firmware for NVL-S
    * cirrus: cs35l56: Update firmware for the ASUS UX5406SA
    * qcom: vpu: add Gen2 firmware binary for Purwa
    * cirrus: cs42l45: Update CS42L45 SDCA codec firmware for Dell laptops
    * QCA: Add Bluetooth firmware for WCN6855 ROM 1.0
    * iwlwifi: add Bz/Sc/Hr/Gf FW for core24.60-33 release
    * iwlwifi: update ty/So/Ma/cc/Qu/QuZ firmwares for core24.60-33 release
    * cirrus: cs35l56: Add firmware for Cirrus Amps for a few Dell laptops
    * ueagle-atm: sadly drop unlicensed files
    * qcom: sync audioreach firmwares from v1.0.4 build
    * QCA: Update Bluetooth QCA6698 firmware to 2.1.2-00072
    * amdgpu: DMCUB updates for various ASICs
    * tas2781: Add firmware for new HP projects
    * rtw89: 8852a: add TX power track R34
    * Update AMD SEV firmware

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://bodhi.fedoraproject.org/updates/FEDORA-2026-c53019ed4f");
  script_set_attribute(attribute:"solution", value:
"Update the affected linux-firmware package.");
  script_set_attribute(attribute:"risk_factor", value:"High");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/08/11");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/08/11");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/08/13");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:fedoraproject:fedora:44");
  script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fedoraproject:fedora:linux-firmware");
  script_set_attribute(attribute:"generated_plugin", value:"current");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Fedora Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list");

  exit(0);
}


include('rpm2.inc');

if (!get_kb_item('Host/local_checks_enabled')) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
var os_product = get_kb_item('installed_os/local/SSH/0/product');
if (isnull(os_product) || 'Fedora' >!< os_product) audit(AUDIT_OS_NOT, 'Fedora');
var os_version = get_kb_item('installed_os/local/SSH/0/version');
if (isnull(os_version)) audit(AUDIT_UNKNOWN_APP_VER, 'Fedora');
if (! preg(pattern:"^44([^0-9]|$)", string:os_version)) audit(AUDIT_OS_NOT, 'Fedora 44', 'Fedora ' + os_version);

if (!get_kb_item('Host/RedHat/rpm-list')) audit(AUDIT_PACKAGE_LIST_MISSING);

var cpu = get_kb_item('Host/cpu');
if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
if ('x86_64' >!< cpu && cpu !~ "^i[3-6]86$" && 's390' >!< cpu && 'aarch64' >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, 'Fedora', cpu);

var constraints = [
  {
    'release': '44',
    'pkgs': [
      {'reference':'linux-firmware-20260810-1.fc44', 'rpm_spec_vers_cmp':TRUE}
    ]
  }
];

var os_release = get_one_kb_item('installed_os/local/SSH/0/release');
var os_sp = get_one_kb_item('Host/*/minor_release');

var flag = 0;
var reference;
var sp;
var _cpu;
var el_string;
var rpm_spec_vers_cmp;
var epoch;
var allowmaj;
var exists_check;
var cves;
foreach var constraint ( constraints ) {
  # Check that the target release is equal to the affected release
  if (!empty_or_null(constraint['release'])){
    if (constraint['release'] != os_release) continue;
  }
  if (!empty_or_null(constraint['sp'])){
    if (constraint['sp'] != os_sp) continue;
  }
  foreach var pkg ( constraint['pkgs'] ) {
    reference = NULL;
    sp = NULL;
    _cpu = NULL;
    el_string = NULL;
    rpm_spec_vers_cmp = NULL;
    epoch = NULL;
    allowmaj = NULL;
    exists_check = NULL;
    cves = NULL;
    if (!empty_or_null(pkg['reference'])) reference = pkg['reference'];
    if (!empty_or_null(pkg['sp'])) sp = pkg['sp'];
    if (!empty_or_null(pkg['cpu'])) _cpu = pkg['cpu'];
    if (!empty_or_null(pkg['el_string'])) el_string = pkg['el_string'];
    if (!empty_or_null(pkg['rpm_spec_vers_cmp'])) rpm_spec_vers_cmp = pkg['rpm_spec_vers_cmp'];
    if (!empty_or_null(pkg['epoch'])) epoch = pkg['epoch'];
    if (!empty_or_null(pkg['allowmaj'])) allowmaj = pkg['allowmaj'];
    if (!empty_or_null(pkg['exists_check'])) exists_check = pkg['exists_check'];
    if (!empty_or_null(pkg['cves'])) cves = pkg['cves'];
    if (reference &&
        ## (no known rpm to check OR known rpm_exists)
        (!exists_check || rpm_exists(rpm:exists_check)) &&
        rpm_check(sp:sp, cpu:_cpu, reference:reference, epoch:epoch, el_string:el_string, rpm_spec_vers_cmp:rpm_spec_vers_cmp, allowmaj:allowmaj, cves:cves)) flag++;
  }
}

if (flag)
{
  security_report_v4(
      port       : 0,
      severity   : SECURITY_HOLE,
      extra      : rpm_report_get()
  );
  exit(0);
}
else
{
  var tested = pkg_tests_get();
  if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
  else audit(AUDIT_PACKAGE_NOT_INSTALLED, 'linux-firmware');
}