RHSA-2023:6595 — Security Advisory

An update for linux-firmware is now available for Red Hat Enterprise Linux 9.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

The linux-firmware packages contain all of the firmware files that are required by various devices to operate.

Security Fix(es):

• hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi (CVE-2022-27635)

• hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi (CVE-2022-40964)

• hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi (CVE-2022-46329)

• hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi (CVE-2022-36351)

• hw amd: Return Address Predictor vulnerability leading to information disclosure (CVE-2023-20569)

• hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi (CVE-2022-38076)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Red Hat Enterprise Linux 9.3 Release Notes linked from the References section.