CVE-2022-27635: High severity Intel Killer vulnerability
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/linux-firmwareto a version that resolves this vulnerability.Fixed in 20230804 - Upgrade
Upgrade
debian/firmware-nonfreeto a version that resolves this vulnerability.Fixed in 20250410-2Fixed in 20260916-1 - Upgrade
Upgrade
debian/firmware-nonfreeto a version that resolves this vulnerability.Fixed in 20240610-1
Event History
Frequently Asked Questions
What is CVE-2022-27635?
CVE-2022-27635 is a vulnerability related to improper access control in Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software.
How can a privileged user exploit CVE-2022-27635?
A privileged user can potentially enable escalation of privilege via local access
What is the severity level of CVE-2022-27635?
CVE-2022-27635 has a severity level of 6.7 (high).
Which software versions are affected by CVE-2022-27635?
Intel Killer versions up to 34.22.1163, Intel Proset/Wireless Wifi versions up to 22.200, and Intel Uefi Firmware versions up to 3.2.20.23023 are affected.
Where can I find more information about CVE-2022-27635?
You can find more information about CVE-2022-27635 in the Intel Security Center advisory and the Fedora Project message.