Red Hat Security Advisory: linux-firmware security and enhancement update
An update for linux-firmware is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-12321US | high8.8 | — | ||
Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege vi… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (44)
- Behobeniwl100-firmware-0:39.31.5.1-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5479 - Behobeniwl1000-firmware-1:39.31.5.1-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5479 - Behobeniwl105-firmware-0:18.168.6.1-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5479 - Behobeniwl135-firmware-0:18.168.6.1-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5479 - Behobeniwl2000-firmware-0:18.168.6.1-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5479 - Behobeniwl2030-firmware-0:18.168.6.1-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5479 - Behobeniwl3160-firmware-1:25.30.13.0-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5479 - Behobeniwl3945-firmware-0:15.32.2.9-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5479 - Behobeniwl4965-firmware-0:228.61.2.24-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5479 - Behobeniwl5000-firmware-0:8.83.5.1_1-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5479 - Behobeniwl5150-firmware-0:8.24.2.2-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5479 - Behobeniwl6000-firmware-0:9.221.4.1-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5479 - Behobeniwl6000g2a-firmware-0:18.168.6.1-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5479 - Behobeniwl6000g2b-firmware-0:18.168.6.1-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5479 - Behobeniwl6050-firmware-0:41.28.5.1-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5479 - Behobeniwl7260-firmware-1:25.30.13.0-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5479 - Behobenlibertas-sd8686-firmware-0:20200619-101.git3890db36.el8_3.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5479 - Behobenlibertas-sd8787-firmware-0:20200619-101.git3890db36.el8_3.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5479 - Behobenlibertas-usb8388-firmware-2:20200619-101.git3890db36.el8_3.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5479 - Behobenlibertas-usb8388-olpc-firmware-0:20200619-101.git3890db36.el8_3.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5479 - Behobenlinux-firmware-0:20200619-101.git3890db36.el8_3.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5479 - Behobenlinux-firmware-0:20200619-101.git3890db36.el8_3.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)
For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2020:5479 - Workaroundiwl100-firmware-0:39.31.5.1-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
To mitigate these vulnerabilities on the operating system level, disable the Bluetooth functionality via blocklisting kernel modules in the Linux kernel. The kernel modules can be prevented from being loaded by using system-wide modprobe rules. Instructions on how to disable Bluetooth modules are available on the Customer Portal at https://access.redhat.com/solutions/2682931. Alternatively, Bluetooth can be disabled within the hardware or at BIOS level which will also provide an effective mitigation as the kernel will not be able to detect that Bluetooth hardware is present on the system.
- Workaroundiwl1000-firmware-1:39.31.5.1-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
To mitigate these vulnerabilities on the operating system level, disable the Bluetooth functionality via blocklisting kernel modules in the Linux kernel. The kernel modules can be prevented from being loaded by using system-wide modprobe rules. Instructions on how to disable Bluetooth modules are available on the Customer Portal at https://access.redhat.com/solutions/2682931. Alternatively, Bluetooth can be disabled within the hardware or at BIOS level which will also provide an effective mitigation as the kernel will not be able to detect that Bluetooth hardware is present on the system.
- Workaroundiwl105-firmware-0:18.168.6.1-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
To mitigate these vulnerabilities on the operating system level, disable the Bluetooth functionality via blocklisting kernel modules in the Linux kernel. The kernel modules can be prevented from being loaded by using system-wide modprobe rules. Instructions on how to disable Bluetooth modules are available on the Customer Portal at https://access.redhat.com/solutions/2682931. Alternatively, Bluetooth can be disabled within the hardware or at BIOS level which will also provide an effective mitigation as the kernel will not be able to detect that Bluetooth hardware is present on the system.
- Workaroundiwl135-firmware-0:18.168.6.1-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
To mitigate these vulnerabilities on the operating system level, disable the Bluetooth functionality via blocklisting kernel modules in the Linux kernel. The kernel modules can be prevented from being loaded by using system-wide modprobe rules. Instructions on how to disable Bluetooth modules are available on the Customer Portal at https://access.redhat.com/solutions/2682931. Alternatively, Bluetooth can be disabled within the hardware or at BIOS level which will also provide an effective mitigation as the kernel will not be able to detect that Bluetooth hardware is present on the system.
- Workaroundiwl2000-firmware-0:18.168.6.1-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
To mitigate these vulnerabilities on the operating system level, disable the Bluetooth functionality via blocklisting kernel modules in the Linux kernel. The kernel modules can be prevented from being loaded by using system-wide modprobe rules. Instructions on how to disable Bluetooth modules are available on the Customer Portal at https://access.redhat.com/solutions/2682931. Alternatively, Bluetooth can be disabled within the hardware or at BIOS level which will also provide an effective mitigation as the kernel will not be able to detect that Bluetooth hardware is present on the system.
- Workaroundiwl2030-firmware-0:18.168.6.1-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
To mitigate these vulnerabilities on the operating system level, disable the Bluetooth functionality via blocklisting kernel modules in the Linux kernel. The kernel modules can be prevented from being loaded by using system-wide modprobe rules. Instructions on how to disable Bluetooth modules are available on the Customer Portal at https://access.redhat.com/solutions/2682931. Alternatively, Bluetooth can be disabled within the hardware or at BIOS level which will also provide an effective mitigation as the kernel will not be able to detect that Bluetooth hardware is present on the system.
- Workaroundiwl3160-firmware-1:25.30.13.0-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
To mitigate these vulnerabilities on the operating system level, disable the Bluetooth functionality via blocklisting kernel modules in the Linux kernel. The kernel modules can be prevented from being loaded by using system-wide modprobe rules. Instructions on how to disable Bluetooth modules are available on the Customer Portal at https://access.redhat.com/solutions/2682931. Alternatively, Bluetooth can be disabled within the hardware or at BIOS level which will also provide an effective mitigation as the kernel will not be able to detect that Bluetooth hardware is present on the system.
- Workaroundiwl3945-firmware-0:15.32.2.9-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
To mitigate these vulnerabilities on the operating system level, disable the Bluetooth functionality via blocklisting kernel modules in the Linux kernel. The kernel modules can be prevented from being loaded by using system-wide modprobe rules. Instructions on how to disable Bluetooth modules are available on the Customer Portal at https://access.redhat.com/solutions/2682931. Alternatively, Bluetooth can be disabled within the hardware or at BIOS level which will also provide an effective mitigation as the kernel will not be able to detect that Bluetooth hardware is present on the system.
- Workaroundiwl4965-firmware-0:228.61.2.24-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
To mitigate these vulnerabilities on the operating system level, disable the Bluetooth functionality via blocklisting kernel modules in the Linux kernel. The kernel modules can be prevented from being loaded by using system-wide modprobe rules. Instructions on how to disable Bluetooth modules are available on the Customer Portal at https://access.redhat.com/solutions/2682931. Alternatively, Bluetooth can be disabled within the hardware or at BIOS level which will also provide an effective mitigation as the kernel will not be able to detect that Bluetooth hardware is present on the system.
- Workaroundiwl5000-firmware-0:8.83.5.1_1-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
To mitigate these vulnerabilities on the operating system level, disable the Bluetooth functionality via blocklisting kernel modules in the Linux kernel. The kernel modules can be prevented from being loaded by using system-wide modprobe rules. Instructions on how to disable Bluetooth modules are available on the Customer Portal at https://access.redhat.com/solutions/2682931. Alternatively, Bluetooth can be disabled within the hardware or at BIOS level which will also provide an effective mitigation as the kernel will not be able to detect that Bluetooth hardware is present on the system.
- Workaroundiwl5150-firmware-0:8.24.2.2-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
To mitigate these vulnerabilities on the operating system level, disable the Bluetooth functionality via blocklisting kernel modules in the Linux kernel. The kernel modules can be prevented from being loaded by using system-wide modprobe rules. Instructions on how to disable Bluetooth modules are available on the Customer Portal at https://access.redhat.com/solutions/2682931. Alternatively, Bluetooth can be disabled within the hardware or at BIOS level which will also provide an effective mitigation as the kernel will not be able to detect that Bluetooth hardware is present on the system.
- Workaroundiwl6000-firmware-0:9.221.4.1-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
To mitigate these vulnerabilities on the operating system level, disable the Bluetooth functionality via blocklisting kernel modules in the Linux kernel. The kernel modules can be prevented from being loaded by using system-wide modprobe rules. Instructions on how to disable Bluetooth modules are available on the Customer Portal at https://access.redhat.com/solutions/2682931. Alternatively, Bluetooth can be disabled within the hardware or at BIOS level which will also provide an effective mitigation as the kernel will not be able to detect that Bluetooth hardware is present on the system.
- Workaroundiwl6000g2a-firmware-0:18.168.6.1-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
To mitigate these vulnerabilities on the operating system level, disable the Bluetooth functionality via blocklisting kernel modules in the Linux kernel. The kernel modules can be prevented from being loaded by using system-wide modprobe rules. Instructions on how to disable Bluetooth modules are available on the Customer Portal at https://access.redhat.com/solutions/2682931. Alternatively, Bluetooth can be disabled within the hardware or at BIOS level which will also provide an effective mitigation as the kernel will not be able to detect that Bluetooth hardware is present on the system.
- Workaroundiwl6000g2b-firmware-0:18.168.6.1-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
To mitigate these vulnerabilities on the operating system level, disable the Bluetooth functionality via blocklisting kernel modules in the Linux kernel. The kernel modules can be prevented from being loaded by using system-wide modprobe rules. Instructions on how to disable Bluetooth modules are available on the Customer Portal at https://access.redhat.com/solutions/2682931. Alternatively, Bluetooth can be disabled within the hardware or at BIOS level which will also provide an effective mitigation as the kernel will not be able to detect that Bluetooth hardware is present on the system.
- Workaroundiwl6050-firmware-0:41.28.5.1-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
To mitigate these vulnerabilities on the operating system level, disable the Bluetooth functionality via blocklisting kernel modules in the Linux kernel. The kernel modules can be prevented from being loaded by using system-wide modprobe rules. Instructions on how to disable Bluetooth modules are available on the Customer Portal at https://access.redhat.com/solutions/2682931. Alternatively, Bluetooth can be disabled within the hardware or at BIOS level which will also provide an effective mitigation as the kernel will not be able to detect that Bluetooth hardware is present on the system.
- Workaroundiwl7260-firmware-1:25.30.13.0-101.el8_3.1.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
To mitigate these vulnerabilities on the operating system level, disable the Bluetooth functionality via blocklisting kernel modules in the Linux kernel. The kernel modules can be prevented from being loaded by using system-wide modprobe rules. Instructions on how to disable Bluetooth modules are available on the Customer Portal at https://access.redhat.com/solutions/2682931. Alternatively, Bluetooth can be disabled within the hardware or at BIOS level which will also provide an effective mitigation as the kernel will not be able to detect that Bluetooth hardware is present on the system.
- Workaroundlibertas-sd8686-firmware-0:20200619-101.git3890db36.el8_3.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
To mitigate these vulnerabilities on the operating system level, disable the Bluetooth functionality via blocklisting kernel modules in the Linux kernel. The kernel modules can be prevented from being loaded by using system-wide modprobe rules. Instructions on how to disable Bluetooth modules are available on the Customer Portal at https://access.redhat.com/solutions/2682931. Alternatively, Bluetooth can be disabled within the hardware or at BIOS level which will also provide an effective mitigation as the kernel will not be able to detect that Bluetooth hardware is present on the system.
- Workaroundlibertas-sd8787-firmware-0:20200619-101.git3890db36.el8_3.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
To mitigate these vulnerabilities on the operating system level, disable the Bluetooth functionality via blocklisting kernel modules in the Linux kernel. The kernel modules can be prevented from being loaded by using system-wide modprobe rules. Instructions on how to disable Bluetooth modules are available on the Customer Portal at https://access.redhat.com/solutions/2682931. Alternatively, Bluetooth can be disabled within the hardware or at BIOS level which will also provide an effective mitigation as the kernel will not be able to detect that Bluetooth hardware is present on the system.
- Workaroundlibertas-usb8388-firmware-2:20200619-101.git3890db36.el8_3.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
To mitigate these vulnerabilities on the operating system level, disable the Bluetooth functionality via blocklisting kernel modules in the Linux kernel. The kernel modules can be prevented from being loaded by using system-wide modprobe rules. Instructions on how to disable Bluetooth modules are available on the Customer Portal at https://access.redhat.com/solutions/2682931. Alternatively, Bluetooth can be disabled within the hardware or at BIOS level which will also provide an effective mitigation as the kernel will not be able to detect that Bluetooth hardware is present on the system.
- Workaroundlibertas-usb8388-olpc-firmware-0:20200619-101.git3890db36.el8_3.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
To mitigate these vulnerabilities on the operating system level, disable the Bluetooth functionality via blocklisting kernel modules in the Linux kernel. The kernel modules can be prevented from being loaded by using system-wide modprobe rules. Instructions on how to disable Bluetooth modules are available on the Customer Portal at https://access.redhat.com/solutions/2682931. Alternatively, Bluetooth can be disabled within the hardware or at BIOS level which will also provide an effective mitigation as the kernel will not be able to detect that Bluetooth hardware is present on the system.
- Workaroundlinux-firmware-0:20200619-101.git3890db36.el8_3.noarch as a component of Red Hat Enterprise Linux BaseOS (v. 8)
To mitigate these vulnerabilities on the operating system level, disable the Bluetooth functionality via blocklisting kernel modules in the Linux kernel. The kernel modules can be prevented from being loaded by using system-wide modprobe rules. Instructions on how to disable Bluetooth modules are available on the Customer Portal at https://access.redhat.com/solutions/2682931. Alternatively, Bluetooth can be disabled within the hardware or at BIOS level which will also provide an effective mitigation as the kernel will not be able to detect that Bluetooth hardware is present on the system.
- Workaroundlinux-firmware-0:20200619-101.git3890db36.el8_3.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)
To mitigate these vulnerabilities on the operating system level, disable the Bluetooth functionality via blocklisting kernel modules in the Linux kernel. The kernel modules can be prevented from being loaded by using system-wide modprobe rules. Instructions on how to disable Bluetooth modules are available on the Customer Portal at https://access.redhat.com/solutions/2682931. Alternatively, Bluetooth can be disabled within the hardware or at BIOS level which will also provide an effective mitigation as the kernel will not be able to detect that Bluetooth hardware is present on the system.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan