Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2024:4262

Опубликовано: 07 мая 2025
Источник: rocky
Оценка: Moderate

Описание

Moderate: linux-firmware security update

The linux-firmware packages contain all of the firmware files that are required by various devices to operate.

Security Fix(es):

  • kernel: Reserved fields in guest message responses may not be zero initialized (CVE-2023-31346)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 8

НаименованиеАрхитектураРелизRPM
iwl1000-firmwarenoarch122.el8_10.1iwl1000-firmware-39.31.5.1-122.el8_10.1.noarch.rpm
iwl100-firmwarenoarch122.el8_10.1iwl100-firmware-39.31.5.1-122.el8_10.1.noarch.rpm
iwl105-firmwarenoarch122.el8_10.1iwl105-firmware-18.168.6.1-122.el8_10.1.noarch.rpm
iwl135-firmwarenoarch122.el8_10.1iwl135-firmware-18.168.6.1-122.el8_10.1.noarch.rpm
iwl2000-firmwarenoarch122.el8_10.1iwl2000-firmware-18.168.6.1-122.el8_10.1.noarch.rpm
iwl2030-firmwarenoarch122.el8_10.1iwl2030-firmware-18.168.6.1-122.el8_10.1.noarch.rpm
iwl3160-firmwarenoarch122.el8_10.1iwl3160-firmware-25.30.13.0-122.el8_10.1.noarch.rpm
iwl3945-firmwarenoarch122.el8_10.1iwl3945-firmware-15.32.2.9-122.el8_10.1.noarch.rpm
iwl4965-firmwarenoarch122.el8_10.1iwl4965-firmware-228.61.2.24-122.el8_10.1.noarch.rpm
iwl5000-firmwarenoarch122.el8_10.1iwl5000-firmware-8.83.5.1_1-122.el8_10.1.noarch.rpm

Показывать по

Связанные CVE

Исправления

Связанные уязвимости

CVSS3: 6
ubuntu
больше 1 года назад

Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests.

CVSS3: 4.4
redhat
больше 1 года назад

Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests.

CVSS3: 6
nvd
больше 1 года назад

Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests.

CVSS3: 6
github
больше 1 года назад

Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests.