Red Hat Security Advisory: linux-firmware security update

This advisory addresses a security issue related to speculative execution vulnerabilities in modern microprocessors, specifically variant CVE-2017-5715 (branch target injection). The flaw allows an unprivileged attacker to potentially read privileged memory by exploiting cache side-channel attacks. The linux-firmware package update includes microcode fixes to mitigate this hardware-level vulnerability. This issue is related to the broader Spectre class of vulnerabilities and complements kernel-level mitigations.

• access.redhat.com/errata/RHSA-2018:0014 (opens in a new tab)
• access.redhat.com/security/updates/classification/ (opens in a new tab)
• access.redhat.com/security/vulnerabilities/speculativeexecution (opens in a new tab)
• access.redhat.com/security/cve/CVE-2017-5715 (opens in a new tab)
• bugzilla.redhat.com/show_bug.cgi?id=1519780 (opens in a new tab)
• security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0014.json (opens in a new tab)

• Red Hat Security Advisory: Satellite 6.19.6 Async UpdateCriticalVulnerability2026-11-13
• Red Hat Security Advisory: vdsm security updateHighVulnerability2018-01-05
• Red Hat Security Advisory: ovirt-guest-agent-docker security and bug fix updateHighVulnerability2018-01-05
• Red Hat Security Advisory: vdsm security updateHighVulnerability2018-01-05
• Red Hat Security Advisory: redhat-virtualization-host security updateHighVulnerability2018-01-05