Red Hat Security Advisory: linux-firmware security, bug fix, and enhancement update

Fixed packages 17

Vulnerabilities 6

• High 8.2
  CVE-2022-27635

  Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user…

  linux-firmware firmware-nonfree Debian Ubuntu
  Aug 11, 2023
• High 8.2
  CVE-2022-46329

  Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially…

  firmware-nonfree Debian
  Aug 11, 2023
• High 7.9
  CVE-2022-40964

  Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user…

  linux-firmware firmware-nonfree Debian Ubuntu
  Aug 11, 2023
• Medium 4.3
  CVE-2022-36351

  Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticat…

  linux-firmware firmware-nonfree Debian Ubuntu
  Aug 11, 2023
• Low 3.8
  CVE-2022-38076

  Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an authenticated…

  linux-firmware firmware-nonfree Debian Ubuntu
  Aug 11, 2023
• Unscored —
  CVE-2023-20569

  A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. …

  AMD 3rd Gen AMD EPYC™ Processors 2nd Gen AMD EPYC™ Processors 4th Gen AMD EPYC™ Processors Debian Ubuntu Alpine
  Aug 8, 2023

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.3_release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2178579
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2207625
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2214391
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2235321
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2238960
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2238961
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2238962
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2238963
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2238964
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_6595.json
• report
  https://access.redhat.com/security/cve/CVE-2022-27635
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-27635
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-27635
• article
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00766.html
• report
  https://access.redhat.com/security/cve/CVE-2022-36351
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-36351
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-36351
• report
  https://access.redhat.com/security/cve/CVE-2022-38076
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-38076
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-38076
• report
  https://access.redhat.com/security/cve/CVE-2022-40964
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-40964
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-40964
• report
  https://access.redhat.com/security/cve/CVE-2022-46329
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-46329
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-46329
• report
  https://access.redhat.com/security/cve/CVE-2023-20569
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-20569
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-20569
• article
  https://access.redhat.com/solutions/7049120
• article
  https://www.amd.com/content/dam/amd/en/documents/corporate/cr/speculative-return-stack-overflow-whitepaper.pdf
• article
  https://www.amd.com/en/resources/product-security/bulletin/amd-sb-7005.html