Important: Red Hat Security Advisory: linux-firmware security update

An update for linux-firmware is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Fedora 37 : linux-firmware (2023-defb0a89ff)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-defb0a89ff advisory. Update to upstream 20230919 release: amd-ucode: Add note on fam19h warnings i915: update MTL HuC to version 8.5.4 amdgpu: update DMCUB to 0.0.183.0...

Fedora 38 : linux-firmware (2023-4056a5c165)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-4056a5c165 advisory. Update to upstream 20230919 release: amd-ucode: Add note on fam19h warnings i915: update MTL HuC to version 8.5.4 amdgpu: update DMCUB to 0.0.183.0...

CVE-2022-40964

Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-40964: Improper Access Control

Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-46329: Protection Mechanism Failure

Protection mechanism failure for some IntelR PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-28714: Improper Access Control

Improper access control in firmware for some IntelR PROSet/Wireless WiFi software for Windows before version 22.220 HF Hot Fix may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-38076: Improper Input Validation

Improper input validation in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36351: Improper Input Validation

Improper input validation in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2022-27635: Improper Access Control

Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2023-4493

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi and KillerTM WiFi affected versions not specified Description The issue is related to insufficient input validation in the IntelR PROSet/Wireless WiFi and KillerTM WiFi software. This could allow an authenticated us...

PT-2023-4728

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi and KillerTM WiFi affected versions not specified Description The issue is related to improper access control in IntelR PROSet/Wireless WiFi and KillerTM WiFi software, which may allow a privileged user to potential...

PT-2023-4473

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi and KillerTM WiFi software affected versions not specified Description The issue is related to improper access control in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software, which may allow a privileged use...

PT-2023-4492

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi and KillerTM WiFi software affected versions not specified Description The issue is related to improper input validation in the IntelR PROSet/Wireless WiFi and KillerTM WiFi software. This may allow an unauthenticat...

PT-2022-6288 · Intel · Intel Proset/Wireless Wifi

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi software versions prior to 22.140 Description: The issue is related to an out-of-bounds write in the IntelR PROSet/Wireless WiFi software, which may allow an unauthenticated user to potentially enable denial of...

CVE-2022-26047: Improper Input Validation

Improper input validation for some IntelR PROSet/Wireless WiFi, Intel vProR CSME WiFi and KillerTM WiFi products may allow unauthenticated user to potentially enable denial of service via local access...

CVE-2022-28667: Out-of-bounds Write

Out-of-bounds write for some IntelR PROSet/Wireless WiFi software before version 22.140 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

Vulnerabilities fixed in Intel Products

Intel has fixed vulnerabilities in the firmware of chipsets from Active Management Technology AMT, Server Platform Services SPS, and PROSet/Wireless WiFi. The vulnerabilities allow a malicious able to perform a denial-of-service DoS or obtain elevated user privileges. Intel has released updates t...

CVE-2022-21181

Improper input validation for some IntelR PROSet/Wireless WiFi and KillerTM WiFi products may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2022-14927

Name of the Vulnerable Software and Affected Versions IntelR PROSet/Wireless WiFi products affected versions not specified Description The issue is related to improper input validation, which may allow an unauthenticated user to potentially enable denial of service via adjacent access...