iwl7260-firmware (AlmaLinux:8) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the AlmaLinux:8 package iwl7260-firmware, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (7)

• CVE-2022-46329 — CVSS 8.2 (high): Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation…
• CVE-2023-20592 — CVSS 6.5 (medium): Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache…
• CVE-2023-31346 — CVSS 6.0 (medium): Failure to initialize memory in SEV Firmware may allow a privileged attacker to access stale data from other guests.
• CVE-2023-20593 — CVSS 5.5 (medium): An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive…
• CVE-2023-20584 — CVSS 5.3 (medium): IOMMU improperly handles certain special address ranges with invalid device table entries (DTEs), which may allow an attacker with…
• CVE-2023-20569 — CVSS 4.7 (medium): A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in…
• CVE-2023-31356 — CVSS 4.4 (medium): Incomplete system memory cleanup in SEV firmware could allow a privileged attacker to corrupt guest private memory, potentially resulting…