RLSA-2024:3178 Important: linux-firmware security update

The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Security Fixes: hw: intel: Protection mechanism failure for some IntelR PROSet/Wireless WiFi CVE-2022-46329 hw: amd: INVD instruction may lead to a loss of SEV-ES guest machine memory...

The vulnerability of the Intel PROSet/Wireless WiFi connection tool lies in the insufficient channel limitation for specified endpoints, allowing attackers to compromise the protected information.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to insufficient channel limitation for specified endpoints. Exploiting this vulnerability can allow a remote attacker to disclose protected information...

Linux Distros Unpatched Vulnerability : CVE-2021-37409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi products may allow a privileged user to potentially enable escalation of privileg...

Linux Distros Unpatched Vulnerability : CVE-2022-40964

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow a privileged user to potentially enable escalation of privileg...

Linux Distros Unpatched Vulnerability : CVE-2022-27635

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow a privileged user to potentially enable escalation of privileg...

Linux Distros Unpatched Vulnerability : CVE-2023-35061

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper initialization for the IntelR PROSet/Wireless and IntelR KillerTM Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially...

The vulnerability of the Intel PROSet/Wireless WiFi connection utility is related to synchronization errors when using a shared resource (“Race Situation”). This allows a hacker to cause a service failure.

The vulnerability of the Intel PROSet/Wireless WiFi networking utility is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool, related to pointer swapping, allows a hacker to trigger a service failure.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to pointer aliasing. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability of the Intel PROSet/Wireless WiFi networking utility lies in the fact that operations are performed outside the buffer in memory, allowing a malicious actor to cause a service failure.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Intel PROSet/Wireless WiFi connection utility is related to synchronization errors when using a shared resource (“Race Situation”). This allows a hacker to cause a service failure.

The vulnerability of the Intel PROSet/Wireless WiFi networking utility is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-36285

Race condition in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-40887

Race condition in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-41166

Stack-based buffer overflow in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-39606

Improper input validation in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-39356

NULL pointer dereference in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-39271

Improper restriction of communication channel to intended endpoints in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software before version 23.80 may allow an unauthenticated user to potentially enable information disclosure via adjacent access...

CVE-2024-36285

Race condition in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-41168

Use after free in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-41168

CVE-2024-41168 is a use-after-free vulnerability in Intel PROSet/Wireless WiFi and Killer WiFi software for Windows prior to version 23.80. The issue, observed as a resource/ownership problem, could allow an unauthenticated user to trigger denial of service via adjacent access. Affected products ...

CVE-2024-39271

Improper restriction of communication channel to intended endpoints in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software before version 23.80 may allow an unauthenticated user to potentially enable information disclosure via adjacent access...