Most recent entries from all

ALSA-2023:6595 — Important: linux-firmware security, bug fix, and enhancement update

Affected: AlmaLinux:9: iwl100-firmware, AlmaLinux:9: iwl1000-firmware, AlmaLinux:9: iwl105-firmware, AlmaLinux:9: iwl135-firmware, AlmaLinux:9: iwl2000-firmware, AlmaLinux:9: iwl2030-firmware, AlmaLinux:9: iwl3160-firmware, AlmaLinux:9: iwl5000-firmware, AlmaLinux:9: iwl5150-firmware, AlmaLinux:9: iwl6000g2a-firmware and 7 more

The linux-firmware packages contain all of the firmware files that are required by various devices to operate.

Security Fix(es):

* hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi (CVE-2022-27635) * hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi (CVE-2022-40964) * hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi (CVE-2022-46329) * hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi (CVE-2022-36351) * hw amd: Return Address Predictor vulnerability leading to information disclosure (CVE-2023-20569) * hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi (CVE-2022-38076)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2023-04888

certfr-2023-avi-0640 — De multiples vulnérabilités ont été découvertes dans les produits Intel. Elles permettent à un attaquant de provoquer u…

certfr-2023-avi-0640

EUVD-2026-216036

fkie_cve-2022-36351

Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticated user to potentially enable denial of service via adjacent access.

GHSA-vxgp-5w4f-87hm

Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticated user to potentially enable denial of service via adjacent access.

gsd-2022-36351

RHBA-2024:0115 — Red Hat Bug Fix Advisory: linux-firmware bug fix and enhancement update

hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi

UBUNTU-CVE-2022-36351

Affected: Ubuntu:14.04:LTS: linux-firmware, Ubuntu:16.04:LTS: linux-firmware, Ubuntu:Pro:18.04:LTS: linux-firmware, Ubuntu:Pro:20.04:LTS: linux-firmware, Ubuntu:22.04:LTS: linux-firmware, Ubuntu:24.04:LTS: linux-firmware, Ubuntu:25.10: linux-firmware, Ubuntu:26.04:LTS: linux-firmware

Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticated user to potentially enable denial of service via adjacent access.

WID-SEC-W-2023-2013 — Intel PROSet Wireless WiFi Software: Mehrere Schwachstellen

Ein lokaler Angreifer kann mehrere Schwachstellen in Intel PROSet Wireless WiFi Software ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service Zustand herbeizuführen.