This patch updates iwx(4) to new firmware images (API version -67). Intel has published a related security advisory: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html
Make sure to get a fresh kernel from -current sources and update to iwx-firmware-20211101 with fw_update before trying this patch. The new firmware version shows as "fw ver 67.8f59b80b.0" in dmesg. I have tested on AX200 and AX201 and I am not seeing any issues. iwx(4) devices which are using the iwx-Qu-c0-hr-b0-63 image did not receive a firmware update. I cannot tell why. ok? diff 777a5184786f624f57b85b8460919a1130498508 1d9e5ec96bf733cdb7c339f7179b945ff1e0a937 blob - 1d87b3522c60081eac0b0f54cdd772984de4b340 blob + d48e22237cb568cb0bed6a49e82d3be6d4744da4 --- sys/dev/pci/if_iwx.c +++ sys/dev/pci/if_iwx.c @@ -9266,7 +9266,7 @@ iwx_attach(struct device *parent, struct device *self, switch (PCI_PRODUCT(pa->pa_id)) { case PCI_PRODUCT_INTEL_WL_22500_1: - sc->sc_fwname = "iwx-cc-a0-63"; + sc->sc_fwname = "iwx-cc-a0-67"; sc->sc_device_family = IWX_DEVICE_FAMILY_22000; sc->sc_integrated = 0; sc->sc_ltr_delay = IWX_SOC_FLAGS_LTR_APPLY_DELAY_NONE; @@ -9283,7 +9283,7 @@ iwx_attach(struct device *parent, struct device *self, return; } - sc->sc_fwname = "iwx-QuZ-a0-hr-b0-63"; + sc->sc_fwname = "iwx-QuZ-a0-hr-b0-67"; sc->sc_device_family = IWX_DEVICE_FAMILY_22000; sc->sc_integrated = 1; sc->sc_ltr_delay = IWX_SOC_FLAGS_LTR_APPLY_DELAY_200;