Red Hat Security AdvisoryRHSA-2024:7418
linux-firmware security update
Released 2024-10-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS AUS (v.8.6) iwl100-firmware-39.31.5.1-114.3.el8_6.1, iwl1000-firmware-1:39.31.5.1-114.3.el8_6.1, iwl105-firmware-18.168.6.1-114.3.el8_6.1 +18
- Red Hat Enterprise Linux BaseOS E4S (v.8.6) iwl100-firmware-39.31.5.1-114.3.el8_6.1, iwl1000-firmware-1:39.31.5.1-114.3.el8_6.1, iwl105-firmware-18.168.6.1-114.3.el8_6.1 +18
- Red Hat Enterprise Linux BaseOS TUS (v.8.6) iwl100-firmware-39.31.5.1-114.3.el8_6.1, iwl1000-firmware-1:39.31.5.1-114.3.el8_6.1, iwl105-firmware-18.168.6.1-114.3.el8_6.1 +18
Fixes 2 records
Priority LOW 26
IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-…
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00187 · Published 2024-08-13 · Fixed in MilanPI 1.0.0.C, GenoaPI 1.0.0.B
Priority LOW 20
Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, potentially resulting in a loss of data integrity.
CVSS 3.1MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00214 · Published 2024-08-13 · Fixed in MilanPI 1.0.0.C, GenoaPI 1.0.0.B +2 CWE-459
