Red Hat Security AdvisoryRHSA-2024:0561
linux-firmware security update
Released 2024-01-30 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v.8.4) iwl100-firmware-39.31.5.1-105.el8_4.1, iwl1000-firmware-1:39.31.5.1-105.el8_4.1, iwl105-firmware-18.168.6.1-105.el8_4.1 +18
- Red Hat Enterprise Linux BaseOS E4S (v.8.4) iwl100-firmware-39.31.5.1-105.el8_4.1, iwl1000-firmware-1:39.31.5.1-105.el8_4.1, iwl105-firmware-18.168.6.1-105.el8_4.1 +18
- Red Hat Enterprise Linux BaseOS TUS (v.8.4) iwl100-firmware-39.31.5.1-105.el8_4.1, iwl1000-firmware-1:39.31.5.1-105.el8_4.1, iwl105-firmware-18.168.6.1-105.el8_4.1 +18
Fixes 3 records
Priority MEDIUM 58
An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.05066 · Published 2023-07-24 · Fixed CWE-209
Priority LOW 32
A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction.
CVSS 3.1MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.07302 · Published 2023-08-08 · Partial fix CWE-203
Priority LOW 31
Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01018 · Published 2023-11-14 · Partial fix
THREATIST.IORead the docs