# ELSA-2023-6595: Security update for 26 packages ELSA-2023-6595, released November 11, 2023, fixes 6 CVEs across 26 products. None of them is reported as exploited. Patch Radar priority: High. - Web page: https://patchblox.com/security/fix/linux/elsa-2023-6595 - Platform: Linux - Released: Nov 11, 2023 - Priority: High (Closes CVE-2022-46329, high severity) - CVEs: 6, exploited: 0, on CISA KEV: 0 - Vendor advisory: https://linux.oracle.com/errata/ELSA-2023-6595.html ## Applies to | Product | Release | Fixed in | |---|---|---| | [iwl100-firmware](https://patchblox.com/security/data/product/linux/iwl100-firmware.md) | ol 9 | 999:39.31.5.1-999.27.el9 | | [iwl1000-firmware](https://patchblox.com/security/data/product/linux/iwl1000-firmware.md) | ol 9 | 999:39.31.5.1-999.27.el9 | | [iwl105-firmware](https://patchblox.com/security/data/product/linux/iwl105-firmware.md) | ol 9 | 999:18.168.6.1-999.27.el9 | | [iwl135-firmware](https://patchblox.com/security/data/product/linux/iwl135-firmware.md) | ol 9 | 999:18.168.6.1-999.27.el9 | | [iwl2000-firmware](https://patchblox.com/security/data/product/linux/iwl2000-firmware.md) | ol 9 | 999:18.168.6.1-999.27.el9 | | [iwl2030-firmware](https://patchblox.com/security/data/product/linux/iwl2030-firmware.md) | ol 9 | 999:18.168.6.1-999.27.el9 | | [iwl3160-firmware](https://patchblox.com/security/data/product/linux/iwl3160-firmware.md) | ol 9 | 999:25.30.13.0-999.27.el9 | | [iwl3945-firmware](https://patchblox.com/security/data/product/linux/iwl3945-firmware.md) | ol 9 | 999:15.32.2.9-999.27.el9 | | [iwl4965-firmware](https://patchblox.com/security/data/product/linux/iwl4965-firmware.md) | ol 9 | 999:228.61.2.24-999.27.el9 | | [iwl5000-firmware](https://patchblox.com/security/data/product/linux/iwl5000-firmware.md) | ol 9 | 999:8.83.5.1_1-999.27.el9 | | [iwl5150-firmware](https://patchblox.com/security/data/product/linux/iwl5150-firmware.md) | ol 9 | 999:8.24.2.2-999.27.el9 | | [iwl6000-firmware](https://patchblox.com/security/data/product/linux/iwl6000-firmware.md) | ol 9 | 999:9.221.4.1-999.27.el9 | | [iwl6000g2a-firmware](https://patchblox.com/security/data/product/linux/iwl6000g2a-firmware.md) | ol 9 | 999:18.168.6.1-999.27.el9 | | [iwl6000g2b-firmware](https://patchblox.com/security/data/product/linux/iwl6000g2b-firmware.md) | ol 9 | 999:18.168.6.1-999.27.el9 | | [iwl6050-firmware](https://patchblox.com/security/data/product/linux/iwl6050-firmware.md) | ol 9 | 999:41.28.5.1-999.27.el9 | | [iwl7260-firmware](https://patchblox.com/security/data/product/linux/iwl7260-firmware.md) | ol 9 | 999:25.30.13.0-999.27.el9 | | [iwlax2xx-firmware](https://patchblox.com/security/data/product/linux/iwlax2xx-firmware.md) | ol 9 | 999:20230516-999.27.el9 | | [libertas-sd8686-firmware](https://patchblox.com/security/data/product/linux/libertas-sd8686-firmware.md) | ol 9 | 999:20230516-999.27.git6c9e0ed5.el9 | | [libertas-sd8787-firmware](https://patchblox.com/security/data/product/linux/libertas-sd8787-firmware.md) | ol 9 | 999:20230516-999.27.git6c9e0ed5.el9 | | [libertas-usb8388-firmware](https://patchblox.com/security/data/product/linux/libertas-usb8388-firmware.md) | ol 9 | 999:20230516-999.27.git6c9e0ed5.el9 | | [libertas-usb8388-olpc-firmware](https://patchblox.com/security/data/product/linux/libertas-usb8388-olpc-firmware.md) | ol 9 | 999:20230516-999.27.git6c9e0ed5.el9 | | [linux-firmware](https://patchblox.com/security/data/product/linux/linux-firmware.md) | ol 9 | 999:20230516-999.27.git6c9e0ed5.el9 | | [linux-firmware-core](https://patchblox.com/security/data/product/linux/linux-firmware-core.md) | ol 9 | 999:20230516-999.27.git6c9e0ed5.el9 | | [linux-firmware-whence](https://patchblox.com/security/data/product/linux/linux-firmware-whence.md) | ol 9 | 999:20230516-999.27.git6c9e0ed5.el9 | | [liquidio-firmware](https://patchblox.com/security/data/product/linux/liquidio-firmware.md) | ol 9 | 999:20230516-999.27.git6c9e0ed5.el9 | | [netronome-firmware](https://patchblox.com/security/data/product/linux/netronome-firmware.md) | ol 9 | 999:20230516-999.27.git6c9e0ed5.el9 | ## CVEs this fix closes | CVE | Priority | Title | CVSS | EPSS | Exploitation | |---|---|---|---:|---:|---| | [CVE-2022-46329](https://patchblox.com/security/data/cve/CVE-2022-46329.md) | High | iwl100-firmware: The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Secur... | 8.2 | 0.0028 | | | [CVE-2022-38076](https://patchblox.com/security/data/cve/CVE-2022-38076.md) | High | iwl100-firmware: The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Bug F... | 7.8 | 0.0026 | | | [CVE-2022-27635](https://patchblox.com/security/data/cve/CVE-2022-27635.md) | High | iwl100-firmware: The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Bug F... | 8.2 | 0.0024 | | | [CVE-2022-40964](https://patchblox.com/security/data/cve/CVE-2022-40964.md) | High | iwl100-firmware: The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Bug F... | 7.9 | 0.0024 | | | [CVE-2023-20569](https://patchblox.com/security/data/cve/CVE-2023-20569.md) | Routine | AMD: CVE-2023-20569 Return Address Predictor | 5.6 | 0.0730 | | | [CVE-2022-36351](https://patchblox.com/security/data/cve/CVE-2022-36351.md) | Routine | iwl100-firmware: The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Bug F... | 6.5 | 0.0060 | | --- Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo