Red Hat Security AdvisoryRHSA-2024:7484
linux-firmware security update
Released 2024-10-02 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS (v. 9) iwl100-firmware-39.31.5.1-143.3.el9_4, iwl1000-firmware-1:39.31.5.1-143.3.el9_4, iwl105-firmware-18.168.6.1-143.3.el9_4 +14
Fixes 2 records
Priority LOW 26
IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-…
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00187 · Published 2024-08-13 · Fixed in MilanPI 1.0.0.C, GenoaPI 1.0.0.B
Priority LOW 20
Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, potentially resulting in a loss of data integrity.
CVSS 3.1MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00214 · Published 2024-08-13 · Fixed in MilanPI 1.0.0.C, GenoaPI 1.0.0.B +2 CWE-459
