Skip to content
OpenAdvisories
Medium ALSA-2024:4774 1 CVE

Moderate: linux-firmware security update

Published Jul 23, 2024 · Updated Oct 29, 2026

Summary

The linux-firmware packages contain all of the firmware files that are required by various devices to operate.

Security Fix(es):

* kernel: Reserved fields in guest message responses may not be zero initialized (CVE-2023-31346)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 17

ReleasePackageFixed in
AlmaLinux · 9 iwl100-firmware 39.31.5.1-143.1.el9_4
AlmaLinux · 9 iwl1000-firmware 1:39.31.5.1-143.1.el9_4
AlmaLinux · 9 iwl105-firmware 18.168.6.1-143.1.el9_4
AlmaLinux · 9 iwl135-firmware 18.168.6.1-143.1.el9_4
AlmaLinux · 9 iwl2000-firmware 18.168.6.1-143.1.el9_4
AlmaLinux · 9 iwl2030-firmware 18.168.6.1-143.1.el9_4
AlmaLinux · 9 iwl3160-firmware 1:25.30.13.0-143.1.el9_4
AlmaLinux · 9 iwl5000-firmware 8.83.5.1_1-143.1.el9_4
AlmaLinux · 9 iwl5150-firmware 8.24.2.2-143.1.el9_4
AlmaLinux · 9 iwl6000g2a-firmware 18.168.6.1-143.1.el9_4
AlmaLinux · 9 iwl6000g2b-firmware 18.168.6.1-143.1.el9_4
AlmaLinux · 9 iwl6050-firmware 41.28.5.1-143.1.el9_4
AlmaLinux · 9 iwl7260-firmware 1:25.30.13.0-143.1.el9_4
AlmaLinux · 9 libertas-sd8787-firmware 20240603-143.1.el9_4
AlmaLinux · 9 linux-firmware 20240603-143.1.el9_4
AlmaLinux · 9 linux-firmware-whence 20240603-143.1.el9_4
AlmaLinux · 9 netronome-firmware 20240603-143.1.el9_4

Vulnerabilities 1

References

  • report
    https://access.redhat.com/security/cve/CVE-2023-31346
  • report
    https://bugzilla.redhat.com/2250458
  • advisory
    https://errata.almalinux.org/9/ALSA-2024-4774.html