Summary
The linux-firmware packages contain all of the firmware files that are required by various devices to operate.
Security Fix(es):
* kernel: hw:amd:IOMMU improperly handles certain special address leading to a loss of guest integrity (CVE-2023-20584)
* kernel: hw: amd:Incomplete system memory cleanup in SEV firmware corrupt guest private memory (CVE-2023-31356)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Rocky Linux · 8 | linux-firmware | 0:20240827-124.git3cff7109.el8_10 |
Vulnerabilities 3
-
High 7.5
Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM …
-
Medium 5.3
IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an at…
-
Medium 4.4
Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, pot…