linux-firmware-20230814-140.el9

The linux-firmware packages contain all of the firmware files that are required
by various devices to operate.

Security Fix(es):

* hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi
(CVE-2022-27635)
* hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi
(CVE-2022-40964)
* hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless
WiFi (CVE-2022-46329)
* hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi
(CVE-2022-36351)
* hw amd: Return Address Predictor vulnerability leading to information
disclosure (CVE-2023-20569)
* hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi
(CVE-2022-38076)

For more details about the security issue(s), including the impact, a CVSS
score, acknowledgments, and other related information, refer to the CVE page(s)
listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the MIRACLE LINUX 9.3
Release Notes linked from the References section.

CVE-2022-27635
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM)
WiFi software may allow a privileged user to potentially enable escalation of
privilege via local access.
CVE-2022-36351
Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM)
WiFi software may allow an unauthenticated user to potentially enable denial of
service via adjacent access.
CVE-2022-38076
Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM)
WiFi software may allow an authenticated user to potentially enable escalation
of privilege via local access.
CVE-2022-40964
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM)
WiFi software may allow a privileged user to potentially enable escalation of
privilege via local access.
CVE-2022-46329
Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may
allow a privileged user to potentially enable escalation of privilege via local
access.
CVE-2023-20569
A side channel vulnerability on some of the AMD CPUs may allow an attacker to
influence the return address prediction. This may result in speculative
execution at an attacker-controlled address, potentially leading to information
disclosure.