Summary
The linux-firmware packages contain all of the firmware files that are required by various devices to operate.
Security Fix(es):
* kernel: hw:amd:IOMMU improperly handles certain special address leading to a loss of guest integrity (CVE-2023-20584)
* kernel: hw: amd:Incomplete system memory cleanup in SEV firmware corrupt guest private memory (CVE-2023-31356)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 17
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | iwl100-firmware | 39.31.5.1-143.3.el9_4 |
| AlmaLinux · 9 | iwl1000-firmware | 1:39.31.5.1-143.3.el9_4 |
| AlmaLinux · 9 | iwl105-firmware | 18.168.6.1-143.3.el9_4 |
| AlmaLinux · 9 | iwl135-firmware | 18.168.6.1-143.3.el9_4 |
| AlmaLinux · 9 | iwl2000-firmware | 18.168.6.1-143.3.el9_4 |
| AlmaLinux · 9 | iwl2030-firmware | 18.168.6.1-143.3.el9_4 |
| AlmaLinux · 9 | iwl3160-firmware | 1:25.30.13.0-143.3.el9_4 |
| AlmaLinux · 9 | iwl5000-firmware | 8.83.5.1_1-143.3.el9_4 |
| AlmaLinux · 9 | iwl5150-firmware | 8.24.2.2-143.3.el9_4 |
| AlmaLinux · 9 | iwl6000g2a-firmware | 18.168.6.1-143.3.el9_4 |
| AlmaLinux · 9 | iwl6000g2b-firmware | 18.168.6.1-143.3.el9_4 |
| AlmaLinux · 9 | iwl6050-firmware | 41.28.5.1-143.3.el9_4 |
| AlmaLinux · 9 | iwl7260-firmware | 1:25.30.13.0-143.3.el9_4 |
| AlmaLinux · 9 | libertas-sd8787-firmware | 20240905-143.3.el9_4 |
| AlmaLinux · 9 | linux-firmware | 20240905-143.3.el9_4 |
| AlmaLinux · 9 | linux-firmware-whence | 20240905-143.3.el9_4 |
| AlmaLinux · 9 | netronome-firmware | 20240905-143.3.el9_4 |
Vulnerabilities 2
-
Medium 5.3
IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an at…
-
Medium 4.4
Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, pot…