(RHSA-2024:4575) Important: linux-firmware security update

2024-07-1615:30:13

access.redhat.com

linux-firmware

security update

intel

amd

vulnerabilities

firmware

cve-2022-27635

cve-2022-40964

cve-2022-46329

cve-2023-20592

CVSS3

8.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

AI Score

8.4

Confidence

High

JSON

The linux-firmware packages contain all of the firmware files that are required by various devices to operate.

Security Fix(es):

hw: intel: Improper access control for some Intel® PROSet/Wireless WiFi (CVE-2022-27635)
hw: intel: Improper access control for some Intel® PROSet/Wireless WiFi (CVE-2022-40964)
hw: intel: Protection mechanism failure for some Intel® PROSet/Wireless WiFi (CVE-2022-46329)
hw: amd: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (CVE-2023-20592)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8noarchiwl7260-firmware< 25.30.13.0-102.el8_2.1iwl7260-firmware-25.30.13.0-102.el8_2.1.noarch.rpm
RedHat8noarchiwl135-firmware< 18.168.6.1-102.el8_2.1iwl135-firmware-18.168.6.1-102.el8_2.1.noarch.rpm
RedHat8noarchlibertas-usb8388-firmware< 20240419-102.git055dfa8e.el8_2libertas-usb8388-firmware-20240419-102.git055dfa8e.el8_2.noarch.rpm
RedHat8noarchlibertas-sd8686-firmware< 20240419-102.git055dfa8e.el8_2libertas-sd8686-firmware-20240419-102.git055dfa8e.el8_2.noarch.rpm
RedHat8noarchiwl1000-firmware< 39.31.5.1-102.el8_2.1iwl1000-firmware-39.31.5.1-102.el8_2.1.noarch.rpm
RedHat8noarchlibertas-usb8388-olpc-firmware< 20240419-102.git055dfa8e.el8_2libertas-usb8388-olpc-firmware-20240419-102.git055dfa8e.el8_2.noarch.rpm
RedHat8noarchiwl5150-firmware< 8.24.2.2-102.el8_2.1iwl5150-firmware-8.24.2.2-102.el8_2.1.noarch.rpm
RedHat8noarchiwl2030-firmware< 18.168.6.1-102.el8_2.1iwl2030-firmware-18.168.6.1-102.el8_2.1.noarch.rpm
RedHat8noarchiwl6050-firmware< 41.28.5.1-102.el8_2.1iwl6050-firmware-41.28.5.1-102.el8_2.1.noarch.rpm
RedHat8noarchiwl4965-firmware< 228.61.2.24-102.el8_2.1iwl4965-firmware-228.61.2.24-102.el8_2.1.noarch.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	8	noarch	iwl7260-firmware	< 25.30.13.0-102.el8_2.1	iwl7260-firmware-25.30.13.0-102.el8_2.1.noarch.rpm
RedHat	8	noarch	iwl135-firmware	< 18.168.6.1-102.el8_2.1	iwl135-firmware-18.168.6.1-102.el8_2.1.noarch.rpm
RedHat	8	noarch	libertas-usb8388-firmware	< 20240419-102.git055dfa8e.el8_2	libertas-usb8388-firmware-20240419-102.git055dfa8e.el8_2.noarch.rpm
RedHat	8	noarch	libertas-sd8686-firmware	< 20240419-102.git055dfa8e.el8_2	libertas-sd8686-firmware-20240419-102.git055dfa8e.el8_2.noarch.rpm
RedHat	8	noarch	iwl1000-firmware	< 39.31.5.1-102.el8_2.1	iwl1000-firmware-39.31.5.1-102.el8_2.1.noarch.rpm
RedHat	8	noarch	libertas-usb8388-olpc-firmware	< 20240419-102.git055dfa8e.el8_2	libertas-usb8388-olpc-firmware-20240419-102.git055dfa8e.el8_2.noarch.rpm
RedHat	8	noarch	iwl5150-firmware	< 8.24.2.2-102.el8_2.1	iwl5150-firmware-8.24.2.2-102.el8_2.1.noarch.rpm
RedHat	8	noarch	iwl2030-firmware	< 18.168.6.1-102.el8_2.1	iwl2030-firmware-18.168.6.1-102.el8_2.1.noarch.rpm
RedHat	8	noarch	iwl6050-firmware	< 41.28.5.1-102.el8_2.1	iwl6050-firmware-41.28.5.1-102.el8_2.1.noarch.rpm
RedHat	8	noarch	iwl4965-firmware	< 228.61.2.24-102.el8_2.1	iwl4965-firmware-228.61.2.24-102.el8_2.1.noarch.rpm