Red Hat Security AdvisoryRHSA-2024:3939
linux-firmware security update
Released 2024-06-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) iwl100-firmware-39.31.5.1-83.el7_9, iwl1000-firmware-1:39.31.5.1-83.el7_9, iwl105-firmware-18.168.6.1-83.el7_9 +14
- Red Hat Enterprise Linux Server (v. 7) iwl100-firmware-39.31.5.1-83.el7_9, iwl1000-firmware-1:39.31.5.1-83.el7_9, iwl105-firmware-18.168.6.1-83.el7_9 +14
- Red Hat Enterprise Linux Workstation (v. 7) iwl100-firmware-39.31.5.1-83.el7_9, iwl1000-firmware-1:39.31.5.1-83.el7_9, iwl105-firmware-18.168.6.1-83.el7_9 +14
Fixes 5 records
Priority LOW 37
Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00276 · Published 2023-08-11 · Fixed CWE-693
Priority LOW 37
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 8.2· Local · High privileges · No interaction · EPSS 0.00236 · Published 2023-08-11 · Fixed CWE-284
Priority LOW 34
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.9· Local · High privileges · No interaction · EPSS 0.00235 · Published 2023-08-11 · Fixed CWE-284
Priority LOW 34
Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00262 · Published 2023-08-11 · Fixed CWE-20
Priority LOW 30
Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00595 · Published 2023-08-11 · Fixed CWE-20
THREATIST.IORead the docs