CVE-2023-20569

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.

A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.

The linux-firmware packages contain all of the firmware files that are required by various devices to operate.

Security Fix(es):

• hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi (CVE-2022-27635)
• hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi (CVE-2022-40964)
• hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi (CVE-2022-46329)
• hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi (CVE-2022-36351)
• hw amd: Return Address Predictor vulnerability leading to information disclosure (CVE-2023-20569)
• hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi (CVE-2022-38076)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

The linux-firmware packages contain all of the firmware files that are required by various devices to operate.

Security Fix(es):

• hw amd: Return Address Predictor vulnerability leading to information disclosure (CVE-2023-20569)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

• kernel: use after free in unix_stream_sendpage (CVE-2023-4622)
• kernel: vmwgfx: reference count issue leads to use-after-free in surface handling (CVE-2023-5633)
• kernel: netfilter: potential slab-out-of-bound access due to integer underflow (CVE-2023-42753)
• Kernel: UAF during login when accessing the shost ipaddress (CVE-2023-2162)
• hw amd: Return Address Predictor vulnerability leading to information disclosure (CVE-2023-20569)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

• Backport OVS l4 Symmetric Hashing to almalinux-8 (JIRA:AlmaLinux-12746)
• Unbounded memory usage by TCP for receive buffers (JIRA:AlmaLinux-15096)
• various kind of guests freeze on rhel 8.8 (JIRA:AlmaLinux-15121)
• AlmaLinux 8: netfilter: conntrack: Fix gre tunneling over ipv6 (JIRA:AlmaLinux-15259)
• NFSv4.1 needs to handle ENOENT error from GETDEVICEINFO (JIRA:AlmaLinux-16407)
• DM multipath showing failed path for an nvme-o-FC LUN when performing I/O operations (JIRA:AlmaLinux-14718)

• New microcode update packages from AMD upstream up to 2023-08-08:
  • New Microcodes for 19h family: sig 0x00a10f11, sig 0x00a10f12, sig 0x00aa0f01, sig 0x00aa0f02;
• SECURITY UPDATE: A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result to potential information disclosure.
  • CPUs firmware updated up to 2023-08-08
  • CVE-2023-20569
  • CVE-2023-20593

• New microcode update packages from AMD upstream up to 2023-08-08:
  • New Microcodes for 19h family: sig 0x00a10f11, sig 0x00a10f12, sig 0x00aa0f01, sig 0x00aa0f02;
• SECURITY UPDATE: A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result to potential information disclosure.
  • CPUs firmware updated up to 2023-08-08
  • CVE-2023-20569
  • CVE-2023-20593

• Update AMD CPU microcode to 2023-12-05:
  • Update AMD CPU microcode for processor family 19h: sig 0x00a10f12, sig 0x00aa0f02, sig 0x00aa0f01, sig 0x00a10f11
• Update AMD CPU microcode for processor family 17h: sig 0x00830f10
• Fix CVE-2023-20569, CVE-2023-20593
• Use tuxcare.els suffixes for all packages

This update adds initial microcode updates for AMD and Intel CPUs for the following security issues:

AMD: A side channel vulnerability in some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled instruction pointer register, potentially leading to information disclosure (CVE-2023-20569).

Intel: Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access (CVE-2022-40982, INTEL-SA-00828).

Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access (CVE-2022-41804, INTEL-SA-00837).

Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable information disclosure via local access (CVE-2023-23908, INTEL-SA-00836).

This kernel update is based on upstream 5.15.126 and fixes or adds mitigations for atleast the following security issues:

Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access (CVE-2022-40982, INTEL-SA-00828).

A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95% (CVE-2023-1206).

A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END. This issue could allow a local user to crash the system or potentially escalate their privileges on the system (CVE-2023-4004).

A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to crash or escalate their privileges on the system (CVE-2023-4147).

A side channel vulnerability in some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled instruction pointer register, potentially leading to information disclosure (CVE-2023-20569).

A buffer overrun vulnerability was found in the netback driver in Xen due to an unusual split packet. This flaw allows an unprivileged guest to cause a denial of service (DoS) of the host by sending network packets to the backend, causing the backend to crash (CVE-2023-34319, XSA-432).

Security fix for AMD Zen1 information leak through Divide By Zero.

For other upstream fixes in this update, see the referenced changelogs.

This kerne-linusl update is based on upstream 5.15.126 and fixes or adds mitigations for atleast the following security issues:

Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access (CVE-2022-40982, INTEL-SA-00828).

A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel’s IPv6 functionality when a user makes a new kind of SYN flood attack. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95% (CVE-2023-1206).

A use-after-free flaw was found in the Linux kernel's netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END. This issue could allow a local user to crash the system or potentially escalate their privileges on the system (CVE-2023-4004).

A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to crash or escalate their privileges on the system (CVE-2023-4147).

A side channel vulnerability in some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled instruction pointer register, potentially leading to information disclosure (CVE-2023-20569).

A buffer overrun vulnerability was found in the netback driver in Xen due to an unusual split packet. This flaw allows an unprivileged guest to cause a denial of service (DoS) of the host by sending network packets to the backend, causing the backend to crash (CVE-2023-34319, XSA-432).

For other upstream fixes in this update, see the referenced changelogs.

These are all security issues fixed in the kernel-devel-6.4.9-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-20230731-2.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the xen-4.17.2_02-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-devel-longterm-6.6.17-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-amdgpu-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-ath10k-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-ath11k-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-ath12k-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-atheros-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-bluetooth-20250208-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-bnx2-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-brcm-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-chelsio-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-dpaa2-20250206-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-i915-20250210-1.1 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the kernel-firmware-intel-20250206-1.1 package on the GA media of openSUSE Tumbleweed.