Anolis OS update for linux-firmware
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 3 |
| CVE-ID | CVE-2023-20584 CVE-2023-31315 CVE-2023-31356 |
| CWE-ID | CWE-20 CWE-264 CWE-459 |
| Exploitation vector | Local |
| Public exploit | N/A |
| Vulnerable software |
Anolis OS Operating systems & Components / Operating system linux-firmware Operating systems & Components / Operating system package or component libertas-usb8388-olpc-firmware Operating systems & Components / Operating system package or component libertas-usb8388-firmware Operating systems & Components / Operating system package or component libertas-sd8787-firmware Operating systems & Components / Operating system package or component libertas-sd8686-firmware Operating systems & Components / Operating system package or component iwl7260-firmware Operating systems & Components / Operating system package or component iwl6050-firmware Operating systems & Components / Operating system package or component iwl6000g2b-firmware Operating systems & Components / Operating system package or component iwl6000g2a-firmware Operating systems & Components / Operating system package or component iwl6000-firmware Operating systems & Components / Operating system package or component iwl5150-firmware Operating systems & Components / Operating system package or component iwl5000-firmware Operating systems & Components / Operating system package or component iwl4965-firmware Operating systems & Components / Operating system package or component iwl3945-firmware Operating systems & Components / Operating system package or component iwl3160-firmware Operating systems & Components / Operating system package or component iwl2030-firmware Operating systems & Components / Operating system package or component iwl2000-firmware Operating systems & Components / Operating system package or component iwl135-firmware Operating systems & Components / Operating system package or component iwl105-firmware Operating systems & Components / Operating system package or component iwl1000-firmware Operating systems & Components / Operating system package or component iwl100-firmware Operating systems & Components / Operating system package or component |
| Vendor | OpenAnolis |
Security Bulletin
This security bulletin contains information about 3 vulnerabilities.
1) Input validation error
EUVDB-ID: #VU97948
Risk: Low
CVSSv4.0: 1.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2023-20584
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to insufficient validation of special address ranges with invalid device table entries (DTEs) in IOMMU. A local user can induce DTE faults to bypass RMP checks in SEV-SNP.
MitigationInstall updates from vendor's repository.
Vulnerable software versionsAnolis OS: 8
linux-firmware: before 20240827-124.git3cff7109
libertas-usb8388-olpc-firmware: before 20240827-124.git3cff7109
libertas-usb8388-firmware: before 20240827-124.git3cff7109
libertas-sd8787-firmware: before 20240827-124.git3cff7109
libertas-sd8686-firmware: before 20240827-124.git3cff7109
iwl7260-firmware: before 25.30.13.0-124
iwl6050-firmware: before 41.28.5.1-124
iwl6000g2b-firmware: before 18.168.6.1-124
iwl6000g2a-firmware: before 18.168.6.1-124
iwl6000-firmware: before 9.221.4.1-124
iwl5150-firmware: before 8.24.2.2-124
iwl5000-firmware: before 8.83.5.1_1-124
iwl4965-firmware: before 228.61.2.24-124
iwl3945-firmware: before 15.32.2.9-124
iwl3160-firmware: before 25.30.13.0-124
iwl2030-firmware: before 18.168.6.1-124
iwl2000-firmware: before 18.168.6.1-124
iwl135-firmware: before 18.168.6.1-124
iwl105-firmware: before 18.168.6.1-124
iwl1000-firmware: before 39.31.5.1-124
iwl100-firmware: before 39.31.5.1-124
CPE2.3- cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
- cpe:2.3:o:openanolis:linux-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:libertas-usb8388-olpc-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:libertas-usb8388-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:libertas-sd8787-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:libertas-sd8686-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl7260-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl6050-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl6000g2b-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl6000g2a-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl6000-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl5150-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl5000-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl4965-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl3945-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl3160-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl2030-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl2000-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl135-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl105-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl1000-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl100-firmware:*:*:*:*:*:anolis_os:*:*
https://anas.openanolis.cn/errata/detail/ANSA-2024:0948
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Permissions, Privileges, and Access Controls
EUVDB-ID: #VU96619
Risk: Low
CVSSv4.0: 5.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2023-31315
CWE-ID:
CWE-264 - Permissions, Privileges, and Access Controls
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to improper validation in a model specific register (MSR). A malicious application with ring0 access can modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution.
MitigationInstall updates from vendor's repository.
Vulnerable software versionsAnolis OS: 8
linux-firmware: before 20240827-124.git3cff7109
libertas-usb8388-olpc-firmware: before 20240827-124.git3cff7109
libertas-usb8388-firmware: before 20240827-124.git3cff7109
libertas-sd8787-firmware: before 20240827-124.git3cff7109
libertas-sd8686-firmware: before 20240827-124.git3cff7109
iwl7260-firmware: before 25.30.13.0-124
iwl6050-firmware: before 41.28.5.1-124
iwl6000g2b-firmware: before 18.168.6.1-124
iwl6000g2a-firmware: before 18.168.6.1-124
iwl6000-firmware: before 9.221.4.1-124
iwl5150-firmware: before 8.24.2.2-124
iwl5000-firmware: before 8.83.5.1_1-124
iwl4965-firmware: before 228.61.2.24-124
iwl3945-firmware: before 15.32.2.9-124
iwl3160-firmware: before 25.30.13.0-124
iwl2030-firmware: before 18.168.6.1-124
iwl2000-firmware: before 18.168.6.1-124
iwl135-firmware: before 18.168.6.1-124
iwl105-firmware: before 18.168.6.1-124
iwl1000-firmware: before 39.31.5.1-124
iwl100-firmware: before 39.31.5.1-124
CPE2.3- cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
- cpe:2.3:o:openanolis:linux-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:libertas-usb8388-olpc-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:libertas-usb8388-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:libertas-sd8787-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:libertas-sd8686-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl7260-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl6050-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl6000g2b-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl6000g2a-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl6000-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl5150-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl5000-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl4965-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl3945-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl3160-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl2030-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl2000-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl135-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl105-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl1000-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl100-firmware:*:*:*:*:*:anolis_os:*:*
https://anas.openanolis.cn/errata/detail/ANSA-2024:0948
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Incomplete cleanup
EUVDB-ID: #VU97951
Risk: Low
CVSSv4.0: 4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2023-31356
CWE-ID:
CWE-459 - Incomplete cleanup
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to incomplete system memory cleanup in SEV firmware. A local privileged user can corrupt guest private memory.
MitigationInstall updates from vendor's repository.
Vulnerable software versionsAnolis OS: 8
linux-firmware: before 20240827-124.git3cff7109
libertas-usb8388-olpc-firmware: before 20240827-124.git3cff7109
libertas-usb8388-firmware: before 20240827-124.git3cff7109
libertas-sd8787-firmware: before 20240827-124.git3cff7109
libertas-sd8686-firmware: before 20240827-124.git3cff7109
iwl7260-firmware: before 25.30.13.0-124
iwl6050-firmware: before 41.28.5.1-124
iwl6000g2b-firmware: before 18.168.6.1-124
iwl6000g2a-firmware: before 18.168.6.1-124
iwl6000-firmware: before 9.221.4.1-124
iwl5150-firmware: before 8.24.2.2-124
iwl5000-firmware: before 8.83.5.1_1-124
iwl4965-firmware: before 228.61.2.24-124
iwl3945-firmware: before 15.32.2.9-124
iwl3160-firmware: before 25.30.13.0-124
iwl2030-firmware: before 18.168.6.1-124
iwl2000-firmware: before 18.168.6.1-124
iwl135-firmware: before 18.168.6.1-124
iwl105-firmware: before 18.168.6.1-124
iwl1000-firmware: before 39.31.5.1-124
iwl100-firmware: before 39.31.5.1-124
CPE2.3- cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
- cpe:2.3:o:openanolis:linux-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:libertas-usb8388-olpc-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:libertas-usb8388-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:libertas-sd8787-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:libertas-sd8686-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl7260-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl6050-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl6000g2b-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl6000g2a-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl6000-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl5150-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl5000-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl4965-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl3945-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl3160-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl2030-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl2000-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl135-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl105-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl1000-firmware:*:*:*:*:*:anolis_os:*:*
- cpe:2.3:o:openanolis:iwl100-firmware:*:*:*:*:*:anolis_os:*:*
https://anas.openanolis.cn/errata/detail/ANSA-2024:0948
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
