OESA-2025-1307

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1307
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2025-1307.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2025-1307
Upstream
Published
2025-03-21T13:18:02Z
Modified
2025-08-12T05:47:06.349563Z
Summary
linux-firmware security update
Details

This package contains firmware images required by some devices.

Security Fix(es):

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP.(CVE-2024-56161)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:22.03-LTS-SP3 / linux-firmware

Package

Name
linux-firmware
Purl
pkg:rpm/openEuler/linux-firmware&distro=openEuler-22.03-LTS-SP3

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20250311-1.oe2203sp3

Ecosystem specific 

{
    "noarch": [
        "linux-firmware-20250311-1.oe2203sp3.noarch.rpm",
        "linux-firmware-ath-20250311-1.oe2203sp3.noarch.rpm",
        "linux-firmware-cypress-20250311-1.oe2203sp3.noarch.rpm",
        "linux-firmware-iwlwifi-20250311-1.oe2203sp3.noarch.rpm",
        "linux-firmware-libertas-20250311-1.oe2203sp3.noarch.rpm",
        "linux-firmware-mediatek-20250311-1.oe2203sp3.noarch.rpm",
        "linux-firmware-mrvl-20250311-1.oe2203sp3.noarch.rpm",
        "linux-firmware-netronome-20250311-1.oe2203sp3.noarch.rpm",
        "linux-firmware-ti-connectivity-20250311-1.oe2203sp3.noarch.rpm"
    ],
    "src": [
        "linux-firmware-20250311-1.oe2203sp3.src.rpm"
    ]
}

openEuler:22.03-LTS-SP4 / linux-firmware

Package

Name
linux-firmware
Purl
pkg:rpm/openEuler/linux-firmware&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20250311-1.oe2203sp4

Ecosystem specific 

{
    "noarch": [
        "linux-firmware-20250311-1.oe2203sp4.noarch.rpm",
        "linux-firmware-ath-20250311-1.oe2203sp4.noarch.rpm",
        "linux-firmware-cypress-20250311-1.oe2203sp4.noarch.rpm",
        "linux-firmware-iwlwifi-20250311-1.oe2203sp4.noarch.rpm",
        "linux-firmware-libertas-20250311-1.oe2203sp4.noarch.rpm",
        "linux-firmware-mediatek-20250311-1.oe2203sp4.noarch.rpm",
        "linux-firmware-mrvl-20250311-1.oe2203sp4.noarch.rpm",
        "linux-firmware-netronome-20250311-1.oe2203sp4.noarch.rpm",
        "linux-firmware-ti-connectivity-20250311-1.oe2203sp4.noarch.rpm"
    ],
    "src": [
        "linux-firmware-20250311-1.oe2203sp4.src.rpm"
    ]
}

openEuler:24.03-LTS / linux-firmware

Package

Name
linux-firmware
Purl
pkg:rpm/openEuler/linux-firmware&distro=openEuler-24.03-LTS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20250311-1.oe2403sp1

Ecosystem specific 

{
    "noarch": [
        "linux-firmware-20250311-1.oe2403.noarch.rpm",
        "linux-firmware-ath-20250311-1.oe2403.noarch.rpm",
        "linux-firmware-cypress-20250311-1.oe2403.noarch.rpm",
        "linux-firmware-iwlwifi-20250311-1.oe2403.noarch.rpm",
        "linux-firmware-libertas-20250311-1.oe2403.noarch.rpm",
        "linux-firmware-mediatek-20250311-1.oe2403.noarch.rpm",
        "linux-firmware-mrvl-20250311-1.oe2403.noarch.rpm",
        "linux-firmware-netronome-20250311-1.oe2403.noarch.rpm",
        "linux-firmware-ti-connectivity-20250311-1.oe2403.noarch.rpm",
        "linux-firmware-20250311-1.oe2403sp1.noarch.rpm",
        "linux-firmware-ath-20250311-1.oe2403sp1.noarch.rpm",
        "linux-firmware-cypress-20250311-1.oe2403sp1.noarch.rpm",
        "linux-firmware-iwlwifi-20250311-1.oe2403sp1.noarch.rpm",
        "linux-firmware-libertas-20250311-1.oe2403sp1.noarch.rpm",
        "linux-firmware-mediatek-20250311-1.oe2403sp1.noarch.rpm",
        "linux-firmware-mrvl-20250311-1.oe2403sp1.noarch.rpm",
        "linux-firmware-netronome-20250311-1.oe2403sp1.noarch.rpm",
        "linux-firmware-ti-connectivity-20250311-1.oe2403sp1.noarch.rpm"
    ],
    "src": [
        "linux-firmware-20250311-1.oe2403.src.rpm",
        "linux-firmware-20250311-1.oe2403sp1.src.rpm"
    ]
}

openEuler:24.03-LTS-SP1 / linux-firmware

Package

Name
linux-firmware
Purl
pkg:rpm/openEuler/linux-firmware&distro=openEuler-24.03-LTS-SP1

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20250311-1.oe2403sp1

Ecosystem specific 

{
    "noarch": [
        "linux-firmware-20250311-1.oe2403sp1.noarch.rpm",
        "linux-firmware-ath-20250311-1.oe2403sp1.noarch.rpm",
        "linux-firmware-cypress-20250311-1.oe2403sp1.noarch.rpm",
        "linux-firmware-iwlwifi-20250311-1.oe2403sp1.noarch.rpm",
        "linux-firmware-libertas-20250311-1.oe2403sp1.noarch.rpm",
        "linux-firmware-mediatek-20250311-1.oe2403sp1.noarch.rpm",
        "linux-firmware-mrvl-20250311-1.oe2403sp1.noarch.rpm",
        "linux-firmware-netronome-20250311-1.oe2403sp1.noarch.rpm",
        "linux-firmware-ti-connectivity-20250311-1.oe2403sp1.noarch.rpm"
    ],
    "src": [
        "linux-firmware-20250311-1.oe2403sp1.src.rpm"
    ]
}

openEuler:20.03-LTS-SP4 / linux-firmware

Package

Name
linux-firmware
Purl
pkg:rpm/openEuler/linux-firmware&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20250311-1.oe2003sp4

Ecosystem specific 

{
    "noarch": [
        "linux-firmware-20250311-1.oe2003sp4.noarch.rpm"
    ],
    "src": [
        "linux-firmware-20250311-1.oe2003sp4.src.rpm"
    ]
}