Red Hat Security Advisory

RHSA-2023:6595

linux-firmware security, bug fix, and enhancement update

Released 2023-11-07 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS (v. 9) iwl100-firmware-39.31.5.1-140.el9_3, iwl1000-firmware-1:39.31.5.1-140.el9_3, iwl105-firmware-18.168.6.1-140.el9_3 +14

Fixes 6 records

TI-2022-22876 CVE-2022-46329 · GHSA-8r5h-8rgj-gp3x

Protection mechanism failure in Intel PROSet/Wireless WiFi software

LOW 37

Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00276 Published 2023-08-11 Fixed CWE-693

TI-2022-10616 CVE-2022-27635 · GHSA-356g-gr7f-c28h

Improper access control in Intel PROSet/Wireless WiFi and Killer WiFi software

LOW 37

Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00236 Published 2023-08-11 Fixed CWE-284

TI-2022-19507 CVE-2022-40964 · GHSA-2hj4-qrq6-rw3w

Improper access control in Intel PROSet/Wireless WiFi and Killer WiFi software

LOW 34

Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS 3.1HIGH 7.9 Local High privileges No interaction EPSS 0.00235 Published 2023-08-11 Fixed CWE-284

TI-2022-17789 CVE-2022-38076 · GHSA-6cj9-745m-pp83

Improper input validation in Intel PROSet/Wireless WiFi and Killer WiFi software

LOW 34

Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00262 Published 2023-08-11 Fixed CWE-20

TI-2023-07021 CVE-2023-20569 · GHSA-xr6c-7pfv-6vgf

Observable discrepancy in AMD Ryzen™ 3000 Series Desktop Processors

LOW 32

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.07302 Published 2023-08-08 Partial fix CWE-203

TI-2022-16693 CVE-2022-36351 · GHSA-vxgp-5w4f-87hm

Improper input validation in Intel PROSet/Wireless WiFi and Killer WiFi software

LOW 30

Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticated user to potentially enable denial of service via adjacent access.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00595 Published 2023-08-11 Fixed CWE-20