CVE-2022-36351: Input Validation
Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/linux-firmwareto a version that resolves this vulnerability.Fixed in 20230804 - Upgrade
Upgrade
debian/firmware-nonfreeto a version that resolves this vulnerability.Fixed in 20250410-2Fixed in 20260916-1 - Upgrade
Upgrade
debian/firmware-nonfreeto a version that resolves this vulnerability.Fixed in 20240610-1
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID is CVE-2022-36351.
What is the severity of CVE-2022-36351?
The severity of CVE-2022-36351 is medium with a CVSS score of 6.5.
Which software products are affected by CVE-2022-36351?
The affected software products include Intel PROSet/Wireless WiFi and Killer WiFi software with specific versions.
How can an unauthenticated user potentially exploit CVE-2022-36351?
An unauthenticated user can potentially enable denial of service via adjacent access.
Where can I find more information about CVE-2022-36351?
You can find more information about CVE-2022-36351 in the Intel Security Advisory and Fedora Project announcements.