Red Hat Security Advisory: linux-firmware security update
Affects Red Hat linux-firmwareSource GCVE Database
Mentioned vulnerabilities
Rated by Threat Radar
Data as of 13 Nov 2026, 18:32 UTC
What to do
AI-suggested
Red Hat has provided a security update to the linux-firmware packages that includes microcode fixes addressing CVE-2017-5715. Applying these updates will mitigate the vulnerability. Users should update their linux-firmware packages to the latest available versions as provided by Red Hat.
Description
This advisory addresses a security issue related to speculative execution vulnerabilities in modern microprocessors, specifically CVE-2017-5715 (branch target injection). The issue allows an unprivileged attacker to potentially read privileged memory by exploiting side-channel cache timing attacks. The linux-firmware package update includes microcode fixes to mitigate this hardware-level flaw. This is a counterpart to kernel-level mitigations for the same vulnerability.
References
- access.redhat.com/errata/RHSA-2018:0015 (opens in a new tab)
- access.redhat.com/security/updates/classification/ (opens in a new tab)
- access.redhat.com/security/vulnerabilities/speculativeexecution (opens in a new tab)
- access.redhat.com/security/cve/CVE-2017-5715 (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=1519780 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0015.json (opens in a new tab)