Summary
The linux-firmware packages contain all of the firmware files that are required by various devices to operate.
Security Fix(es):
* kernel: hw:amd:IOMMU improperly handles certain special address leading to a loss of guest integrity (CVE-2023-20584)
* kernel: hw: amd:Incomplete system memory cleanup in SEV firmware corrupt guest private memory (CVE-2023-31356)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 21
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 8 | iwl100-firmware | 39.31.5.1-124.el8_10.1 |
| AlmaLinux · 8 | iwl1000-firmware | 1:39.31.5.1-124.el8_10.1 |
| AlmaLinux · 8 | iwl105-firmware | 18.168.6.1-124.el8_10.1 |
| AlmaLinux · 8 | iwl135-firmware | 18.168.6.1-124.el8_10.1 |
| AlmaLinux · 8 | iwl2000-firmware | 18.168.6.1-124.el8_10.1 |
| AlmaLinux · 8 | iwl2030-firmware | 18.168.6.1-124.el8_10.1 |
| AlmaLinux · 8 | iwl3160-firmware | 1:25.30.13.0-124.el8_10.1 |
| AlmaLinux · 8 | iwl3945-firmware | 15.32.2.9-124.el8_10.1 |
| AlmaLinux · 8 | iwl4965-firmware | 228.61.2.24-124.el8_10.1 |
| AlmaLinux · 8 | iwl5000-firmware | 8.83.5.1_1-124.el8_10.1 |
| AlmaLinux · 8 | iwl5150-firmware | 8.24.2.2-124.el8_10.1 |
| AlmaLinux · 8 | iwl6000-firmware | 9.221.4.1-124.el8_10.1 |
| AlmaLinux · 8 | iwl6000g2a-firmware | 18.168.6.1-124.el8_10.1 |
| AlmaLinux · 8 | iwl6000g2b-firmware | 18.168.6.1-124.el8_10.1 |
| AlmaLinux · 8 | iwl6050-firmware | 41.28.5.1-124.el8_10.1 |
| AlmaLinux · 8 | iwl7260-firmware | 1:25.30.13.0-124.el8_10.1 |
| AlmaLinux · 8 | libertas-sd8686-firmware | 20240827-124.git3cff7109.el8_10 |
| AlmaLinux · 8 | libertas-sd8787-firmware | 20240827-124.git3cff7109.el8_10 |
| AlmaLinux · 8 | libertas-usb8388-firmware | 2:20240827-124.git3cff7109.el8_10 |
| AlmaLinux · 8 | libertas-usb8388-olpc-firmware | 20240827-124.git3cff7109.el8_10 |
| AlmaLinux · 8 | linux-firmware | 20240827-124.git3cff7109.el8_10 |
Vulnerabilities 3
-
High 7.5
Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM …
-
Medium 5.3
IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an at…
-
Medium 4.4
Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, pot…
References
-
report
https://access.redhat.com/security/cve/CVE-2023-20584
-
report
https://access.redhat.com/security/cve/CVE-2023-31356
-
report
https://bugzilla.redhat.com/2304583
-
report
https://bugzilla.redhat.com/2304593
-
advisory
https://errata.almalinux.org/8/ALSA-2024-7481.html
-
report
https://www.redhat.com/security/data/cve/CVE-2023-31315.html