Linux · Security advisory · October 2, 2024

ALSA-2024:7484: Security update for 17 packages

ALSA-2024:7484, released October 2, 2024, fixes 2 CVEs across 17 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0021
11th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 2 Routine 0

Fixed package versions

ProductReleaseFixed in
iwl100-firmwarealmalinux 939.31.5.1-143.3.el9_4
iwl1000-firmwarealmalinux 91:39.31.5.1-143.3.el9_4
iwl105-firmwarealmalinux 918.168.6.1-143.3.el9_4
iwl135-firmwarealmalinux 918.168.6.1-143.3.el9_4
iwl2000-firmwarealmalinux 918.168.6.1-143.3.el9_4
iwl2030-firmwarealmalinux 918.168.6.1-143.3.el9_4
iwl3160-firmwarealmalinux 91:25.30.13.0-143.3.el9_4
iwl5000-firmwarealmalinux 98.83.5.1_1-143.3.el9_4
iwl5150-firmwarealmalinux 98.24.2.2-143.3.el9_4
iwl6000g2a-firmwarealmalinux 918.168.6.1-143.3.el9_4
iwl6000g2b-firmwarealmalinux 918.168.6.1-143.3.el9_4
iwl6050-firmwarealmalinux 941.28.5.1-143.3.el9_4
iwl7260-firmwarealmalinux 91:25.30.13.0-143.3.el9_4
libertas-sd8787-firmwarealmalinux 920240905-143.3.el9_4
linux-firmwarealmalinux 920240905-143.3.el9_4
linux-firmware-whencealmalinux 920240905-143.3.el9_4
netronome-firmwarealmalinux 920240905-143.3.el9_4

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2023-31356 amd64-microcode: Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, p... 7.5 0.0021 None reported
High CVE-2023-20584 amd64-microcode: IOMMU improperly handles certain special addressranges with invalid device table entries (DTEs), which may allow anat... 7.5 0.0019 None reported
Showing 1 to 2 of 2 1