diff --git a/WORKSPACE b/WORKSPACE
index 2116738..424cb4b 100644
--- a/WORKSPACE
+++ b/WORKSPACE
@@ -140,7 +140,7 @@
 
 linux_firmware_external(
     name = "linux-firmware",
-    version = "b6ea35ff6b9869470a0c68813f1668acb3d356a8",
+    version = "f2eb058afc57348cde66852272d6bf11da1eef8f",
 )
 
 load("//third_party/intel_ucode:external.bzl", "intel_ucode_external")
diff --git a/third_party/linux-firmware/external.bzl b/third_party/linux-firmware/external.bzl
index 7ab8434..9437574 100644
--- a/third_party/linux-firmware/external.bzl
+++ b/third_party/linux-firmware/external.bzl
@@ -4,9 +4,11 @@
     sums = {
         "20211216": "c0f735dd232c22d41ce4d23a050a8d6efe3b6b8cbf9d0a636af5f9df66a619a3",
         "20230310": "14c472af10f9b566c4f575aeb30d8a274d54b1660007e7426b7e4ea21dff81aa",
-        # We need the Zenbleed fix for which there is no release yet, so pin
-        # 2023-07-25 master.
+        # 2023-07-25 master for Zenbleed (CVE-2023-20593)
         "b6ea35ff6b9869470a0c68813f1668acb3d356a8": "67e58b74fb0eebb17fdf95c58a24c6244f93bb0ae8e880f1814ad80463f3a935",
+        # 2023-08-09 master for Inception (CVE-2023-20569) and
+        # Phantom (CVE-2022-23825)
+        "f2eb058afc57348cde66852272d6bf11da1eef8f": "fcd570b8b259049dd84a0326f17a313271962f806ca32dbd9e40cdd9079857d0",
     }
     all_content = """
 filegroup(name = "all_files", srcs = glob(["**"]), visibility = ["//visibility:public"])