RHSA-2024:1112 — Security Advisory

Red Hat Security Advisory: linux-firmware security update

Loading…

Severity

Important

Red Hat Product Security

RHEL 8

Products

Official CSAF product identity

Published · March 6, 2024

Updated · August 7, 2026

Topic

An update for linux-firmware is now available for Red Hat Enterprise Linux 8.6 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The linux-firmware packages contain all of the firmware files that are required by various devices to operate.

Security Fix(es):

  • hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi (CVE-2022-46329)

  • hw: amd: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (CVE-2023-20592)

Bug Fix(es):

  • linux-firmware: hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi (RHEL-14257)

  • linux-firmware: hw: amd: INVD instruction may lead to a loss of SEV-ES guest machine memory integrity problem (RHEL-13978)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Related CVEs

RHSA-2024:1112 — Red Hat Security Advisory: linux-firmware security update | PulseLinux