Skip to content
OpenAdvisories
High ALSA-2023:6595 6 CVEs

Important: linux-firmware security, bug fix, and enhancement update

Published Nov 7, 2023 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

The linux-firmware packages contain all of the firmware files that are required by various devices to operate.

Security Fix(es):

* hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi (CVE-2022-27635)
* hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi (CVE-2022-40964)
* hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi (CVE-2022-46329)
* hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi (CVE-2022-36351)
* hw amd: Return Address Predictor vulnerability leading to information disclosure (CVE-2023-20569)
* hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi (CVE-2022-38076)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Fixed packages 17

ReleasePackageFixed in
AlmaLinux · 9 iwl100-firmware 39.31.5.1-140.el9_3
AlmaLinux · 9 iwl1000-firmware 1:39.31.5.1-140.el9_3
AlmaLinux · 9 iwl105-firmware 18.168.6.1-140.el9_3
AlmaLinux · 9 iwl135-firmware 18.168.6.1-140.el9_3
AlmaLinux · 9 iwl2000-firmware 18.168.6.1-140.el9_3
AlmaLinux · 9 iwl2030-firmware 18.168.6.1-140.el9_3
AlmaLinux · 9 iwl3160-firmware 1:25.30.13.0-140.el9_3
AlmaLinux · 9 iwl5000-firmware 8.83.5.1_1-140.el9_3
AlmaLinux · 9 iwl5150-firmware 8.24.2.2-140.el9_3
AlmaLinux · 9 iwl6000g2a-firmware 18.168.6.1-140.el9_3
AlmaLinux · 9 iwl6000g2b-firmware 18.168.6.1-140.el9_3
AlmaLinux · 9 iwl6050-firmware 41.28.5.1-140.el9_3
AlmaLinux · 9 iwl7260-firmware 1:25.30.13.0-140.el9_3
AlmaLinux · 9 libertas-sd8787-firmware 20230814-140.el9_3
AlmaLinux · 9 linux-firmware 20230814-140.el9_3
AlmaLinux · 9 linux-firmware-whence 20230814-140.el9_3
AlmaLinux · 9 netronome-firmware 20230814-140.el9_3

Vulnerabilities 6

References

  • report
    https://access.redhat.com/security/cve/CVE-2022-27635
  • report
    https://access.redhat.com/security/cve/CVE-2022-36351
  • report
    https://access.redhat.com/security/cve/CVE-2022-38076
  • report
    https://access.redhat.com/security/cve/CVE-2022-40964
  • report
    https://access.redhat.com/security/cve/CVE-2022-46329
  • report
    https://access.redhat.com/security/cve/CVE-2023-20569
  • report
    https://bugzilla.redhat.com/2207625
  • report
    https://bugzilla.redhat.com/2238960
  • report
    https://bugzilla.redhat.com/2238961
  • report
    https://bugzilla.redhat.com/2238962
  • report
    https://bugzilla.redhat.com/2238963
  • report
    https://bugzilla.redhat.com/2238964
  • advisory
    https://errata.almalinux.org/9/ALSA-2023-6595.html