CVE-2022-40964: High severity Intel Killer vulnerability
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/linux-firmwareto a version that resolves this vulnerability.Fixed in 20230804 - Upgrade
Upgrade
debian/firmware-nonfreeto a version that resolves this vulnerability.Fixed in 20250410-2Fixed in 20260916-1 - Upgrade
Upgrade
debian/firmware-nonfreeto a version that resolves this vulnerability.Fixed in 20240610-1
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-40964.
What is the description of CVE-2022-40964?
CVE-2022-40964 is an improper access control vulnerability in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software that may allow a privileged user to potentially enable escalation of privilege via local access.
Which software is affected by CVE-2022-40964?
CVE-2022-40964 affects Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software with versions up to 34.22.1163 for Intel Killer and up to 22.200 for Intel Proset/Wireless Wifi.
What is the severity of CVE-2022-40964?
CVE-2022-40964 has a severity rating of 6.7 (high).
How can I fix CVE-2022-40964?
To fix CVE-2022-40964, it is recommended to update the affected Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software to versions that are not vulnerable.