Loading story…
Red Hat released kernel and linux-firmware updates across supported RHEL 7, 8, and 9 streams to address two AMD processor side-channel flaws: CVE-2023-20593 (Zenbleed) and CVE-2023-20569 (Inception/RAS Poisoning). Zenbleed affects AMD Zen 2 processors and may expose data left in YMM registers by another process or thread; Inception can let a local attacker manipulate return-address prediction and induce speculative execution that discloses information. Both issues require local, low-privilege access and primarily affect confidentiality.
The remediation includes AMD microcode delivered through updated linux-firmware packages and, for applicable RHEL streams, kernel updates. Red Hat issued linux-firmware-20200421-81.git78c0348.el7_9 for RHEL 7 and linux-firmware-20180911-69.2.git85c5d90.el7_6 for RHEL Server AUS 7.6; RHEL 9.0 EUS kernel 5.14.0-70.80.1.el9_0 also includes fixes for the AMD flaws alongside other kernel vulnerabilities. Administrators should apply the relevant supported-channel updates and reboot systems after kernel installation so protections take effect.
See real exploitation activity before you spend the cycle.
17 events from the most recent confirmed update back to the earliest known activity.
Red Hat issued Moderate advisory RHSA-2023:7513, updating RHEL 7 linux-firmware to version linux-firmware-20200421-81.git78c0348.el7_9 and remediating CVE-2023-20569 and CVE-2023-20593.
Red Hat issued Moderate advisory RHSA-2023:7401, updating RHEL 8.6 extended-support linux-firmware packages to remediate CVE-2023-20569 (Inception) and CVE-2023-20593 (Zenbleed). The update covered EUS, AUS, TUS, SAP, and other RHEL 8.6 offerings across x86_64, s390x, ppc64le, and aarch64.
Red Hat issued Important advisory RHSA-2023:7382 for RHEL 9.0 Extended Update Support, supplying kernel 5.14.0-70.80.1.el9_0 and fixes for seven CVEs, including CVE-2023-20593. Systems require a reboot after installation for the new kernel fixes to take effect.
RHSA-2023:7244 fixed CVE-2023-20569 and CVE-2023-20593 in RHEL 7.7 Advanced Update Support linux-firmware packages.
Red Hat issued RHSA-2023:7109 to address CVE-2023-20569 in the RHEL 8 linux-firmware package.
RHSA-2023:4819 and RHSA-2023:4821 remediated CVE-2023-20593 in the standard RHEL 7 kernel and kernel-rt packages.
Red Hat issued RHSA-2023:4699 and RHSA-2023:4696, providing kernel fixes for CVE-2023-20593 (Zenbleed) in the RHEL 7.4 and 7.6 Advanced Update Support streams.
Red Hat publicly listed CVE-2023-20569, an AMD return-address-prediction side-channel flaw that may enable information disclosure through attacker-influenced speculative execution.
Red Hat issued RHBA-2023:2977 for RHEL 8 linux-firmware, which Red Hat later identified as addressing CVE-2023-20569 (Inception/RAS Poisoning).
Red Hat remediated CVE-2023-20593 through further kernel and linux-firmware advisories for RHEL 7, 8, and 9, including extended and specialized support streams through RHSA-2024:0402, RHSA-2024:0403, and RHSA-2024:0561.
Red Hat issued further CVE-2023-20569 fixes for RHEL 9.0 and 9.2 Extended Update Support, RHEL 8.4 mission-critical, SAP, and telecommunications channels, RHEL 8.6 EUS, and RHEL 8.8 EUS through advisories including RHSA-2024:0433, RHSA-2024:0439, RHSA-2024:0448, RHSA-2024:0449, RHSA-2024:0561, RHSA-2024:0724, and RHSA-2024:5255.
Red Hat added CVE-2023-20569 to the Red Hat Bug Fix Advisory RHBA-2023:2977.
Red Hat issued RHSA-2024:2005 to fix CVE-2023-20569 in linux-firmware for RHEL 8.2 Advanced Update Support, Telecommunications Update Service, and Update Services for SAP Solutions.
RHSA-2024:0113 and RHSA-2024:0134 fixed CVE-2023-20569 in RHEL 8 kernel and kernel-rt packages, respectively.
Red Hat issued RHSA-2023:7782 for RHEL Server AUS 7.6 on x86_64, updating linux-firmware to remediate the Inception and Zenbleed information-disclosure vulnerabilities.
RHSA-2023:5419 provided a kernel fix for CVE-2023-20593 in the RHEL 7.7 Advanced Update Support stream.
Red Hat released RHSA-2023:5244 and RHSA-2023:5255 to fix CVE-2023-20593 in RHEL 8 kernel and kernel-rt packages.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
12 references tracked. Mallory keeps watching after this page renders.
access.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourcebugzilla.redhat.com
Open sourceredhat.com
Open sourcebugzilla.redhat.com
Open sourceredhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released Moderate-severity kernel updates for Red Hat Enterprise Linux 9 and 10 to remediate `CVE-2024-36357`, a transient-execution flaw in certain AMD processors. A local attacker with low privileges could potentially infer data held in the L1D cache, exposing sensitive information across privilege boundaries; Red Hat rates the issue CVSS 5.6. For RHEL 9, fixes are provided through `RHSA-2025:19930` and `RHSA-2025:20518`; RHEL 10 is addressed by `RHSA-2025:20095`. `RHSA-2025:19930` also fixes `CVE-2024-36350` and adds a conditional IBPB mitigation for `CVE-2025-40300` (VMSCAPE). Administrators should install the applicable kernel updates and reboot systems for the protections to take effect; RHEL 6, 7, and 8 kernel packages are out of support scope and should be considered affected under Red Hat policy.
Aug 26, 2026
Red Hat released Linux kernel security updates for supported **RHEL 8 and RHEL 9** streams, addressing dozens of flaws across networking, virtualization, storage, graphics, Bluetooth, filesystems, and device drivers. The updates include **CVE-2024-36886**, a TIPC message-reassembly use-after-free issue that could permit remote code execution on affected RHEL 8.6 systems, as well as memory-corruption, information-disclosure, race-condition, denial-of-service, and NULL-pointer defects. RHEL 9.2 updates delivered kernel `5.14.0-284.75.1.el9_2`, while RHEL 8.8 and 8.6 updates provided `4.18.0-477.64.1.el8_8` and `4.18.0-372.111.1.el8_6`, respectively; Real Time kernel users received `5.14.0-284.75.1.rt14.360.el9_2`. The fixes cover, among other issues, **CVE-2024-35791**, a KVM SVM use-after-free in `svm_register_enc_region()`, **CVE-2024-36952**, a race condition in the SCSI `lpfc` driver's NPIV cleanup sequence, and **CVE-2024-27417**, an IPv6 reference leak in `inet6_rtm_getaddr()`. Red Hat shipped remediation through RHSA-2024:4823, RHSA-2024:4831, RHSA-2024:4740, RHSA-2024:4447, RHSA-2024:0113, and RHSA-2024:6567 for affected x86_64, ARM64, IBM Z, and Power offerings, including EUS, SAP, and extended-lifecycle channels. Organizations should apply the applicable kernel packages and **reboot systems** to activate the fixes.
Aug 26, 2026
Red Hat released updated Linux kernel and `kernel-rt` packages for affected RHEL 7, 8, and 9 streams to address Intel processor MMIO stale-data vulnerabilities: `CVE-2022-21123` (SBDR), `CVE-2022-21125` (SBDS), and `CVE-2022-21166` (DRPW). The flaws stem from incomplete cleanup of shared buffers, fill buffers, and special-register write resources, potentially exposing stale processor data. Updates cover standard RHEL releases as well as EUS, AUS, TUS, SAP, telecommunications, and mission-critical offerings across supported architectures. Several advisories also remediate `CVE-2022-2588`, a `cls_route` use-after-free that could enable local privilege escalation, alongside other kernel flaws; separate RHEL updates address `CVE-2022-1158` in KVM and `CVE-2022-2639`, an Open vSwitch out-of-bounds write. Organizations should install the applicable updated kernel packages, reboot systems to activate the fixes, and update or rebuild affected Red Hat OpenStack Platform 17.0 container images where applicable.
Aug 26, 2026