CVE-2022-40964
Summary
| CVE | CVE-2022-40964 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-08-11 03:15:00 UTC |
| Updated | 2023-11-07 03:52:00 UTC |
| Description | Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of privilege via local access. |
Risk And Classification
Problem Types: NVD-CWE-Other
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Debian | Debian Linux | 10.0 | All | All | All |
| Operating System | Fedoraproject | Fedora | 37 | All | All | All |
| Operating System | Fedoraproject | Fedora | 38 | All | All | All |
| Operating System | Fedoraproject | Fedora | 39 | All | All | All |
| Application | Intel | Killer | All | All | All | All |
| Hardware | Intel | Killer Wi-fi 6e Ax1675i/s | - | All | All | All |
| Hardware | Intel | Killer Wi-fi 6e Ax1675x/w | - | All | All | All |
| Hardware | Intel | Killer Wi-fi 6e Ax1690i/s | - | All | All | All |
| Hardware | Intel | Killer Wi-fi 6 Ax1650i/s | - | All | All | All |
| Hardware | Intel | Killer Wireless-ac 1550i/s | - | All | All | All |
| Application | Intel | Proset/wireless Wifi | All | All | All | All |
| Application | Intel | Uefi Firmware | All | All | All | All |
| Hardware | Intel | Wi-fi 6e Ax210 | - | All | All | All |
| Hardware | Intel | Wi-fi 6e Ax211 | - | All | All | All |
| Hardware | Intel | Wi-fi 6e Ax411 | - | All | All | All |
| Hardware | Intel | Wi-fi 6 Ax201 | - | All | All | All |
| Hardware | Intel | Wireless-ac 9461 | - | All | All | All |
| Hardware | Intel | Wireless-ac 9462 | - | All | All | All |
| Hardware | Intel | Wireless-ac 9560 | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Access Denied | MISC | www.intel.com | |
| [SECURITY] Fedora 38 Update: linux-firmware-20230919-1.fc38 - package-announce - Fedora Mailing-Lists | MISC | lists.fedoraproject.org | |
| [SECURITY] Fedora 37 Update: linux-firmware-20230919-1.fc37 - package-announce - Fedora Mailing-Lists | MISC | lists.fedoraproject.org | |
| [SECURITY] [DLA 3596-1] firmware-nonfree security update | MISC | lists.debian.org | |
| [SECURITY] Fedora 39 Update: linux-firmware-20230919-1.fc39 - package-announce - Fedora Mailing-Lists | MISC | lists.fedoraproject.org | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 161101 Oracle Enterprise Linux Security Update for linux-firmware (ELSA-2023-6595)
- 242377 Red Hat Update for linux-firmware security (RHSA-2023:6595)
- 284539 Fedora Security Update for linux (FEDORA-2023-4056a5c165)
- 284545 Fedora Security Update for linux (FEDORA-2023-defb0a89ff)
- 285250 Fedora Security Update for linux (FEDORA-2023-dd3ebcea25)
- 6000056 Debian Security Update for firmware-nonfree (DLA 3596-1)
- 673718 EulerOS Security Update for linux-firmware (EulerOS-SA-2024-1284)
- 941412 AlmaLinux Security Update for linux-firmware (ALSA-2023:6595)