RLSA-2024:3178 Important: linux-firmware security update

The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Security Fixes: hw: intel: Protection mechanism failure for some IntelR PROSet/Wireless WiFi CVE-2022-46329 hw: amd: INVD instruction may lead to a loss of SEV-ES guest machine memory...

Linux Distros Unpatched Vulnerability : CVE-2021-37409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi products may allow a privileged user to potentially enable escalation of privileg...

Intel PROSet/Wireless WiFi insufficient channel limitation

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to insufficient channel limitation for specified endpoints. Exploiting this vulnerability can allow a remote attacker to disclose protected information...

Intel PROSet/Wireless WiFi Race Situation DoS

The vulnerability of the Intel PROSet/Wireless WiFi networking utility is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service interruptions...

Intel PROSet/Wireless WiFi Race Situation DoS

The vulnerability of the Intel PROSet/Wireless WiFi networking utility is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to cause a service failure...

Intel PROSet/Wireless WiFi Buffer Overflow DoS

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Intel PROSet/Wireless WiFi Pointer Swapping DoS

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to pointer aliasing. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

CVE-2024-39356

NULL pointer dereference in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-39271

Improper restriction of communication channel to intended endpoints in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software before version 23.80 may allow an unauthenticated user to potentially enable information disclosure via adjacent access...

CVE-2024-41168

CVE-2024-41168 is a use-after-free vulnerability in Intel PROSet/Wireless WiFi and Killer WiFi software for Windows prior to version 23.80. The issue, observed as a resource/ownership problem, could allow an unauthenticated user to trigger denial of service via adjacent access. Affected products ...

CVE-2024-36285

CVE-2024-36285 describes a race condition in Intel PROSet/Wireless WiFi and Killer WiFi software for Windows prior to 23.80 that can allow an authenticated user to potentially cause a denial of service via local access. The Intel advisory INTEL-SA-01224 expands this family with related CVEs (incl...

CVE-2024-36285

Race condition in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-40887

Race condition in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-41168: Use After Free

Use after free in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-41166: Stack-based Buffer Overflow

Stack-based buffer overflow in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-40887: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-39606: Improper Input Validation

Improper input validation in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-39356: NULL Pointer Dereference

NULL pointer dereference in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-39271: Improper Restriction of Communication Channel to Intended Endpoints

Improper restriction of communication channel to intended endpoints in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software before version 23.80 may allow an unauthenticated user to potentially enable information disclosure via adjacent access...

CVE-2024-36285: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an authenticated user to potentially enable denial of service via local access...