CVE-2020-12321

iwl2000-firmware: The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Secur...

CVE-2020-12321 is fixed in 21 products on 1 platform, first by RHSA-2020:5479, released December 15, 2020. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
8.8
Important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0098
62nd percentile

The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Security Fix(es): * hardware: buffer overflow in bluetooth firmware (CVE-2020-12321) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Enhancement(s): * [Intel 8.3 FEAT] ice: Update to the Default OS DDP Package for ice driver (BZ#1896597) * [Intel 8.3 FEAT] ice: Pull Comms Market Segment Package into RHEL 8.3 (BZ#1896598)

Where it's fixed

ProductFixed inFixReleased
Linux
iwl100-firmware · RHEL 8 0:39.31.5.1-101.el8_3.1 RHSA-2020:5479 Dec 15, 2020
iwl1000-firmware · RHEL 8 1:39.31.5.1-101.el8_3.1 RHSA-2020:5479 Dec 15, 2020
iwl105-firmware · RHEL 8 0:18.168.6.1-101.el8_3.1 RHSA-2020:5479 Dec 15, 2020
iwl135-firmware · RHEL 8 0:18.168.6.1-101.el8_3.1 RHSA-2020:5479 Dec 15, 2020
iwl2000-firmware · RHEL 8 0:18.168.6.1-101.el8_3.1 RHSA-2020:5479 Dec 15, 2020
iwl2030-firmware · RHEL 8 0:18.168.6.1-101.el8_3.1 RHSA-2020:5479 Dec 15, 2020
iwl3160-firmware · RHEL 8 1:25.30.13.0-101.el8_3.1 RHSA-2020:5479 Dec 15, 2020
iwl3945-firmware · RHEL 8 0:15.32.2.9-101.el8_3.1 RHSA-2020:5479 Dec 15, 2020
iwl4965-firmware · RHEL 8 0:228.61.2.24-101.el8_3.1 RHSA-2020:5479 Dec 15, 2020
iwl5000-firmware · RHEL 8 0:8.83.5.1_1-101.el8_3.1 RHSA-2020:5479 Dec 15, 2020
iwl5150-firmware · RHEL 8 0:8.24.2.2-101.el8_3.1 RHSA-2020:5479 Dec 15, 2020
iwl6000-firmware · RHEL 8 0:9.221.4.1-101.el8_3.1 RHSA-2020:5479 Dec 15, 2020
iwl6000g2a-firmware · RHEL 8 0:18.168.6.1-101.el8_3.1 RHSA-2020:5479 Dec 15, 2020
iwl6000g2b-firmware · RHEL 8 0:18.168.6.1-101.el8_3.1 RHSA-2020:5479 Dec 15, 2020
iwl6050-firmware · RHEL 8 0:41.28.5.1-101.el8_3.1 RHSA-2020:5479 Dec 15, 2020
iwl7260-firmware · RHEL 8 1:25.30.13.0-101.el8_3.1 RHSA-2020:5479 Dec 15, 2020
libertas-sd8686-firmware · RHEL 8 0:20200619-101.git3890db36.el8_3 RHSA-2020:5479 Dec 15, 2020
libertas-sd8787-firmware · RHEL 8 0:20200619-101.git3890db36.el8_3 RHSA-2020:5479 Dec 15, 2020
libertas-usb8388-firmware · RHEL 8 2:20200619-101.git3890db36.el8_3 RHSA-2020:5479 Dec 15, 2020
libertas-usb8388-olpc-firmware · RHEL 8 0:20200619-101.git3890db36.el8_3 RHSA-2020:5479 Dec 15, 2020
linux-firmware · RHEL 8 0:20200619-101.git3890db36.el8_3 RHSA-2020:5479 Dec 15, 2020

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.