[RHSA-2023:6595] linux-firmware security, bug fix, and enhancement update

Severity Important

Affected Packages 17

CVEs 6

The linux-firmware packages contain all of the firmware files that are required by various devices to operate.

Security Fix(es):

hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi (CVE-2022-27635)
hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi (CVE-2022-40964)
hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi (CVE-2022-46329)
hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi (CVE-2022-36351)
hw amd: Return Address Predictor vulnerability leading to information disclosure (CVE-2023-20569)
hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi (CVE-2022-38076)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes linked from the References section.

Package	Affected Version
pkg:rpm/redhat/netronome-firmware?distro=redhat-9.3	< 20230814-140.el9_3
pkg:rpm/redhat/linux-firmware?distro=redhat-9.3	< 20230814-140.el9_3
pkg:rpm/redhat/linux-firmware-whence?distro=redhat-9.3	< 20230814-140.el9_3
pkg:rpm/redhat/libertas-sd8787-firmware?distro=redhat-9.3	< 20230814-140.el9_3
pkg:rpm/redhat/iwl7260-firmware?distro=redhat-9.3	< 25.30.13.0-140.el9_3
pkg:rpm/redhat/iwl6050-firmware?distro=redhat-9.3	< 41.28.5.1-140.el9_3
pkg:rpm/redhat/iwl6000g2b-firmware?distro=redhat-9.3	< 18.168.6.1-140.el9_3
pkg:rpm/redhat/iwl6000g2a-firmware?distro=redhat-9.3	< 18.168.6.1-140.el9_3
pkg:rpm/redhat/iwl5150-firmware?distro=redhat-9.3	< 8.24.2.2-140.el9_3
pkg:rpm/redhat/iwl5000-firmware?distro=redhat-9.3	< 8.83.5.1_1-140.el9_3
pkg:rpm/redhat/iwl3160-firmware?distro=redhat-9.3	< 25.30.13.0-140.el9_3
pkg:rpm/redhat/iwl2030-firmware?distro=redhat-9.3	< 18.168.6.1-140.el9_3
pkg:rpm/redhat/iwl2000-firmware?distro=redhat-9.3	< 18.168.6.1-140.el9_3
pkg:rpm/redhat/iwl135-firmware?distro=redhat-9.3	< 18.168.6.1-140.el9_3
pkg:rpm/redhat/iwl105-firmware?distro=redhat-9.3	< 18.168.6.1-140.el9_3
pkg:rpm/redhat/iwl1000-firmware?distro=redhat-9.3	< 39.31.5.1-140.el9_3
pkg:rpm/redhat/iwl100-firmware?distro=redhat-9.3	< 39.31.5.1-140.el9_3

ID

RHSA-2023:6595

Severity

important

URL

https://access.redhat.com/errata/RHSA-2023:6595

Published

2023-11-07T00:00:00
(10 months ago)

Modified

2023-11-07T00:00:00
(10 months ago)

Rights

Other Advisories

Source	# ID	URL
Bugzilla	2207625	https://bugzilla.redhat.com/2207625
Bugzilla	2238960	https://bugzilla.redhat.com/2238960
Bugzilla	2238961	https://bugzilla.redhat.com/2238961
Bugzilla	2238962	https://bugzilla.redhat.com/2238962
Bugzilla	2238963	https://bugzilla.redhat.com/2238963
Bugzilla	2238964	https://bugzilla.redhat.com/2238964
RHSA	RHSA-2023:6595	https://access.redhat.com/errata/RHSA-2023:6595
CVE	CVE-2022-27635	https://access.redhat.com/security/cve/CVE-2022-27635
CVE	CVE-2022-36351	https://access.redhat.com/security/cve/CVE-2022-36351
CVE	CVE-2022-38076	https://access.redhat.com/security/cve/CVE-2022-38076
CVE	CVE-2022-40964	https://access.redhat.com/security/cve/CVE-2022-40964
CVE	CVE-2022-46329	https://access.redhat.com/security/cve/CVE-2022-46329
CVE	CVE-2023-20569	https://access.redhat.com/security/cve/CVE-2023-20569

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:rpm/redhat/netronome-firmware?distro=redhat-9.3	redhat	netronome-firmware	< 20230814-140.el9_3	redhat-9.3
Affected	pkg:rpm/redhat/linux-firmware?distro=redhat-9.3	redhat	linux-firmware	< 20230814-140.el9_3	redhat-9.3
Affected	pkg:rpm/redhat/linux-firmware-whence?distro=redhat-9.3	redhat	linux-firmware-whence	< 20230814-140.el9_3	redhat-9.3
Affected	pkg:rpm/redhat/libertas-sd8787-firmware?distro=redhat-9.3	redhat	libertas-sd8787-firmware	< 20230814-140.el9_3	redhat-9.3
Affected	pkg:rpm/redhat/iwl7260-firmware?distro=redhat-9.3	redhat	iwl7260-firmware	< 25.30.13.0-140.el9_3	redhat-9.3
Affected	pkg:rpm/redhat/iwl6050-firmware?distro=redhat-9.3	redhat	iwl6050-firmware	< 41.28.5.1-140.el9_3	redhat-9.3
Affected	pkg:rpm/redhat/iwl6000g2b-firmware?distro=redhat-9.3	redhat	iwl6000g2b-firmware	< 18.168.6.1-140.el9_3	redhat-9.3
Affected	pkg:rpm/redhat/iwl6000g2a-firmware?distro=redhat-9.3	redhat	iwl6000g2a-firmware	< 18.168.6.1-140.el9_3	redhat-9.3
Affected	pkg:rpm/redhat/iwl5150-firmware?distro=redhat-9.3	redhat	iwl5150-firmware	< 8.24.2.2-140.el9_3	redhat-9.3
Affected	pkg:rpm/redhat/iwl5000-firmware?distro=redhat-9.3	redhat	iwl5000-firmware	< 8.83.5.1_1-140.el9_3	redhat-9.3
Affected	pkg:rpm/redhat/iwl3160-firmware?distro=redhat-9.3	redhat	iwl3160-firmware	< 25.30.13.0-140.el9_3	redhat-9.3
Affected	pkg:rpm/redhat/iwl2030-firmware?distro=redhat-9.3	redhat	iwl2030-firmware	< 18.168.6.1-140.el9_3	redhat-9.3
Affected	pkg:rpm/redhat/iwl2000-firmware?distro=redhat-9.3	redhat	iwl2000-firmware	< 18.168.6.1-140.el9_3	redhat-9.3
Affected	pkg:rpm/redhat/iwl135-firmware?distro=redhat-9.3	redhat	iwl135-firmware	< 18.168.6.1-140.el9_3	redhat-9.3
Affected	pkg:rpm/redhat/iwl105-firmware?distro=redhat-9.3	redhat	iwl105-firmware	< 18.168.6.1-140.el9_3	redhat-9.3
Affected	pkg:rpm/redhat/iwl1000-firmware?distro=redhat-9.3	redhat	iwl1000-firmware	< 39.31.5.1-140.el9_3	redhat-9.3
Affected	pkg:rpm/redhat/iwl100-firmware?distro=redhat-9.3	redhat	iwl100-firmware	< 39.31.5.1-140.el9_3	redhat-9.3

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date