Known vulnerabilities in linux-firmware (Red Hat package)
Vendor:
Red Hat Inc.
Software:
linux-firmware (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:linux-firmware_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
14
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
20260609-161.el9_8
20260411-155.5.el9_7
20260311-155.4.el9_7
20260130-155.3.el9_7
20260107-155.2.el9_7
20251111-155.1.el9_7
20251008-151.5.el9_6
20250812-151.4.el9_6
20250114-146.3.el9_5
20250716-151.3.el9_6
20240905-143.3.el9_4
20240905-138.3.el9_2
20240827-118.3.git3cff7109.el8_8
20240827-124.git3cff7109.el8_10
20240827-114.3.git3cff7109.el8_6
20190429-76.gitddde598.el7_7
20220209-131.el9_0
20200421-84.git78c0348.el7_9
20240715-102.2.git4c8fb21e.el8_2
20240419-102.git055dfa8e.el8_2
20240610-118.1.git90df68d2.el8_8
20240610-106.1.git90df68d2.el8_4
20240610-114.1.git90df68d2.el8_6
20200421-83.git78c0348.el7_9
20220209-130.el9_0
20240111-121.gitb3132c18.el8
20201218-106.git05789708.el8_4
20191202-101.gite8a0f4c9.el8_2
20220210-114.git6342082c.el8_6
20190429-75.gitddde598.el7_7
20180911-69.3.git85c5d90.el7_6
20200421-82.git78c0348.el7_9
20230404-118.git2e92a49f.el8_8
20220209-129.el9_0
20200421-81.git78c0348.el7_9
20180911-69.2.git85c5d90.el7_6
20190516-97.git711d3297.el8_1
20230824-119.git0e048b06.el8_9
20230814-140.el9_3
20191202-100.gite8a0f4c9.el8_2
20220209-128.el9_0
20230404-117.git2e92a49f.el8_8
20230310-135.el9_2
20201218-102.git05789708.el8
20191202-99.gite8a0f4c9.el8_2
20200512-98.gitb2cad6a2.el8
20190429-73.gitddde598.el7_7
20200421-80.git78c0348.el7_9
20190516-96.git711d3297.el8_1
20200619-101.git3890db36.el8_3
20190429-72.gitddde598.el7
Vulnerabilities (14)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU97951 - Incomplete cleanup CVE-2023-31356 |
CWE-459 | Low | 20240827-114.3.git3cff7109.el8_6, 20240827-118.3.git3cff7109.el8_8, 20240827-124.git3cff7109.el8_10, 20240905-138.3.el9_2, 20240905-143.3.el9_4 | 02.10.2024 |
SB2024100225 SB2024100226 SB2024100227 and 19 more |
||
| #VU97948 - Improper input validation CVE-2023-20584 |
CWE-20 | Low | 20240827-114.3.git3cff7109.el8_6, 20240827-124.git3cff7109.el8_10, 20240905-138.3.el9_2, 20240905-143.3.el9_4 | 02.10.2024 |
SB2024100225 SB2024100226 SB2024100227 and 18 more |
||
| #VU96619 - Permissions, Privileges, and Access Controls CVE-2023-31315 |
CWE-264 | Low | 20190429-76.gitddde598.el7_7, 20200421-84.git78c0348.el7_9, 20220209-131.el9_0 | 29.08.2024 |
SB2024082927 SB2024082928 SB2024082929 and 23 more |
||
| #VU94741 - Improper Initialization CVE-2023-31346 |
CWE-665 | Low | 20240610-106.1.git90df68d2.el8_4, 20240610-114.1.git90df68d2.el8_6, 20240610-118.1.git90df68d2.el8_8, 20240715-102.2.git4c8fb21e.el8_2 | 25.07.2024 |
SB2024072522 SB2024072524 SB2024072525 and 10 more |
||
| #VU84028 - Reliance on Undefined, Unspecified, or Implementation-Defined Behavior CVE-2023-20592 |
CWE-758 | Low | 20180911-69.3.git85c5d90.el7_6, 20190429-75.gitddde598.el7_7, 20200421-82.git78c0348.el7_9, 20220210-114.git6342082c.el8_6, 20240111-121.gitb3132c18.el8, 20240419-102.git055dfa8e.el8_2 | 08.12.2023 |
SB2023120815 SB2023120817 SB2023120818 and 24 more |
||
| #VU79527 - Improper input validation CVE-2022-38076 |
CWE-20 | Low | 20200421-83.git78c0348.el7_9, 20230814-140.el9_3 | 15.08.2023 |
SB2023081532 SB2023092004 SB2023092005 and 5 more |
||
| #VU79526 - Improper input validation CVE-2022-36351 |
CWE-20 | Low | 20200421-83.git78c0348.el7_9, 20230814-140.el9_3 | 15.08.2023 |
SB2023081532 SB2023092004 SB2023092005 and 5 more |
||
| #VU79525 - Protection Mechanism Failure CVE-2022-46329 |
CWE-693 | Low | 20200421-83.git78c0348.el7_9, 20201218-106.git05789708.el8_4, 20220209-130.el9_0, 20220210-114.git6342082c.el8_6, 20230404-118.git2e92a49f.el8_8, 20230814-140.el9_3, 20240111-121.gitb3132c18.el8, 20240419-102.git055dfa8e.el8_2 | 15.08.2023 |
SB2023081532 SB2023092004 SB2023092005 and 18 more |
||
| #VU79502 - Improper Access Control CVE-2022-40964 |
CWE-284 | Low | 20200421-83.git78c0348.el7_9, 20220209-130.el9_0, 20230814-140.el9_3, 20240419-102.git055dfa8e.el8_2 | 14.08.2023 |
SB2023081532 SB2023092004 SB2023092005 and 7 more |
||
| #VU79501 - Improper Access Control CVE-2022-27635 |
CWE-284 | Low | 20200421-83.git78c0348.el7_9, 20220209-130.el9_0, 20230814-140.el9_3, 20240419-102.git055dfa8e.el8_2 | 14.08.2023 |
SB2023081532 SB2023092004 SB2023092005 and 7 more |
||
| #VU79263 - Exposure of sensitive information to an unauthorized actor CVE-2023-20569 |
CWE-200 | Low | 20180911-69.2.git85c5d90.el7_6, 20191202-101.gite8a0f4c9.el8_2, 20200421-81.git78c0348.el7_9, 20220209-129.el9_0, 20230814-140.el9_3, 20230824-119.git0e048b06.el8_9 | 08.08.2023 |
SB20230808145 SB20230808146 SB2023080902 and 86 more |
||
| #VU78572 - Use After Free CVE-2023-20593 |
CWE-416 | Low | 20180911-69.2.git85c5d90.el7_6, 20190516-97.git711d3297.el8_1, 20191202-100.gite8a0f4c9.el8_2, 20200421-81.git78c0348.el7_9, 20220209-128.el9_0, 20230310-135.el9_2, 20230404-117.git2e92a49f.el8_8 | 24.07.2023 |
SB2023072428 SB2023072429 SB2023072553 and 134 more |
||
| #VU54234 - Integer overflow CVE-2020-12362 |
CWE-190 | Low | 20201218-102.git05789708.el8 | 20.06.2021 |
SB2021020976 SB2021062102 SB2021062111 and 18 more |
||
| #VU48422 - Memory corruption CVE-2020-12321 |
CWE-119 | Medium | 20190429-73.gitddde598.el7_7, 20190516-96.git711d3297.el8_1, 20191202-99.gite8a0f4c9.el8_2, 20200421-80.git78c0348.el7_9, 20200619-101.git3890db36.el8_3 | 12.11.2020 |
SB2020111603 SB2020121817 SB20210120126 and 12 more |