CVE-2022-38076: Input Validation
Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/linux-firmwareto a version that resolves this vulnerability.Fixed in 20230804 - Upgrade
Upgrade
debian/firmware-nonfreeto a version that resolves this vulnerability.Fixed in 20250410-2Fixed in 20260916-1 - Upgrade
Upgrade
debian/firmware-nonfreeto a version that resolves this vulnerability.Fixed in 20240610-1
Event History
Frequently Asked Questions
What is CVE-2022-38076?
CVE-2022-38076 is a vulnerability that involves improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software, which may allow an authenticated user to potentially enable escalation of privilege via local access.
Which software is affected by CVE-2022-38076?
The Intel(R) PROSet/Wireless WiFi software up to version 22.200, Intel(R) Killer(TM) WiFi software up to version 34.22.1163, and Intel Uefi Firmware up to version 3.2.20.23023 are affected by CVE-2022-38076.
What is the severity of CVE-2022-38076?
CVE-2022-38076 has a severity rating of 7.8 (High).
How can an authenticated user exploit CVE-2022-38076?
An authenticated user can potentially enable escalation of privilege via local access through the CVE-2022-38076 vulnerability.
Where can I find more information about CVE-2022-38076?
More information about CVE-2022-38076 can be found on the Intel Security Center advisory page and the Fedora Project mailing list.