Red Hat Security Advisory

RHSA-2024:5883

linux-firmware security update

Released 2024-08-27 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS AUS (v. 8.2) iwl100-firmware-39.31.5.1-102.2.el8_2.1, iwl1000-firmware-1:39.31.5.1-102.2.el8_2.1, iwl105-firmware-18.168.6.1-102.2.el8_2.1 +18

Fixes 2 records

TI-2023-14990 CVE-2023-31315 · GHSA-7r5c-r5ww-995h

Code injection in AMD 3rd Gen AMD EPYC™ Processors

LOW 36

Improper validation in a model specific register (MSR) could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.

CVSS 3.1HIGH 7.5 Local High privileges No interaction EPSS 0.00627 Published 2024-08-09 Partial fix · Milan PI 1.0.0.D, Naples PI 1.0.0.M +9 CWE-94

TI-2023-15006 CVE-2023-31346 · GHSA-rvmr-97cf-9f3m

Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests.

LOW 27

Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00309 Published 2024-02-13 Partial fix CWE-284