CVE-2022-21181: Input Validation
Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/firmware-nonfreeto a version that resolves this vulnerability.Fixed in 20230210-5Fixed in 20250410-2Fixed in 20260916-1 - Upgrade
Upgrade
debian/firmware-nonfreeto a version that resolves this vulnerability.Fixed in 20220913-1
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2022-21181.
What is the severity of CVE-2022-21181?
The severity of CVE-2022-21181 is high with a severity value of 7.8.
Which Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products are affected by CVE-2022-21181?
The following products are affected: Intel Wireless-ac 9560 Firmware (up to version 22.120), Intel Wireless-ac 9462 Firmware (up to version 22.120), Intel Wireless-ac 9461 Firmware (up to version 22.120), Intel Killer Ac 1550 Firmware (up to version 3.1122.1105), Intel Dual Band Wireless-ac 8260 Firmware (up to version 22.120), Intel Dual Band Wireless-ac 8265 Firmware (up to version 22.120), and Intel Wireless-ac 9260 Firmware (up to version 22.120).
What is the impact of CVE-2022-21181?
The vulnerability may allow a privileged user to potentially enable escalation of privilege via local access.
Where can I find more information about CVE-2022-21181?
You can find more information about CVE-2022-21181 on the Debian LTS Advisory (https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html) and Intel Security Center Advisory (https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html) websites.