Red Hat Security AdvisoryRHSA-2024:7483
linux-firmware security update
Released 2024-10-02 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS EUS (v.9.2) iwl100-firmware-39.31.5.1-138.3.el9_2, iwl1000-firmware-1:39.31.5.1-138.3.el9_2, iwl105-firmware-18.168.6.1-138.3.el9_2 +14
Fixes 2 records
Priority LOW 26
IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-…
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00187 · Published 2024-08-13 · Fixed in MilanPI 1.0.0.C, GenoaPI 1.0.0.B
Priority LOW 20
Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, potentially resulting in a loss of data integrity.
CVSS 3.1MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00214 · Published 2024-08-13 · Fixed in MilanPI 1.0.0.C, GenoaPI 1.0.0.B +2 CWE-459
