CVE-2020-24587

CVE-2020-24587 is referenced in the Amazon Linux 2 kernel advisory for Kernel-5.10-2022-002. The connected document confirms a flaw in the Linux kernel 802.11 wifi fragmentation handling where fragments encrypted under different keys can be reassembled and decrypted, enabling an attacker within w...

CVE-2020-24588

The CVE-2020-24588 entry relates to the 802.11 Wi‑Fi fragmentation/ A‑MSDU handling issue where the plaintext QoS header flag isn’t authenticated, enabling an attacker to inject packets by sending non‑SSP A‑MSDU frames (FragAttacks). Connected Astra Linux advisories describe this as a variant of ...

CVE-2020-12321

CVE-2020-12321 is an Intel Wireless Bluetooth vulnerability affecting Intel wireless Bluetooth products prior to version 21.110. The issue, described in the Intel advisory as an improper buffer restriction, could allow an unauthenticated attacker to escalate privileges via adjacent access. IBM an...

CVE-2020-26139

CVE-2020-26139 affects NetBSD 7.1 kernel as described in connected documents. An Access Point forwards EAPOL frames to other clients before the sender has successfully authenticated, which may enable denial-of-service attacks against connected clients in Wi‑Fi networks and could facilitate exploi...

CVE-2020-26140

The CVE-2020-26140 entry is covered in ARISTA Security Advisory 0063, which groups it under the FragAttacks fragmentation/aggregation vulnerabilities. The advisory states that plaintext data frames are accepted on encrypted networks, enabling packet injection. Fixes are provided as platform-speci...

CVE-2022-26047

CVE-2022-26047 affects Intel® PROSet/Wireless WiFi firmware prior to 22.140, Killer™ WiFi firmware prior to 3.1122.3158, and the associated UEFI 2.2.14.22176.2. The root cause is improper input validation in certain Intel PROSet/Wireless WiFi, Intel vPro® CSME WiFi, and Killer™ WiFi components, w...

CVE-2021-33847

CVE-2021-33847 affects Intel Wireless Bluetooth and Killer Bluetooth firmware prior to 22.120, enabling an authenticated local attacker to potentially escalate privileges. The issue is tied to improper buffer restrictions in the affected firmware. Intel’s advisory (INTEL-SA-00628) and Red Hat/NVD...

CVE-2021-37409

CVE-2021-37409 is an Intel issue in PROSet/Wireless WiFi and Killer WiFi products involving improper access control that could let a privileged local user escalate privileges. Connected sources (Intel INTEL-SA-00621 and Debian advisories) confirm affected products include Intel PROSet/Wireless Wi...

CVE-2021-26950

CVE-2021-26950 affects Intel Wireless Bluetooth and Killer Bluetooth firmware. Root cause: out-of-bounds read in firmware before version 22.120. Impact: authenticated user could potentially enable denial of service via local access. Intel advisory lists affected products (several Intel Wireless B...

CVE-2021-23168

CVE-2021-23168 affects Intel® PROSet/Wireless WiFi and Killer™ WiFi products. Described as an out-of-bounds read that may allow an unauthenticated user to cause denial of service via adjacent access (CVSS v3.1 base score 6.5). Intel’s advisory (INTEL-SA-00621) lists affected components and mitiga...

CVE-2021-44545

CVE-2021-44545 describes improper input validation in Intel PROSet/Wireless WiFi and Killer WiFi products, potentially allowing an unauthenticated attacker to cause a Denial-of-Service via adjacent access. Affected components include Intel PROSet/Wireless WiFi software prior to 22.120 and Killer ...

CVE-2021-26257

CVE-2021-26257 is described in Intel’s advisory INTEL-SA-00628 and related product advisories as an improper buffer restriction in the firmware of some Intel Wireless Bluetooth and Killer Bluetooth products prior to 22.120, potentially allowing an authenticated user to trigger denial of service v...

CVE-2022-21140

Technical details for CVE-2022-21140 are not publicly provided in the supplied documents. Monitor for updates from Intel and vendors; no confirmed affected products, root cause, or fixes are disclosed here.

CVE-2021-23188

CVE-2021-23188 is described in the linked Intel advisory (Intel-SA-00621) as an issue of improper access control in some Intel® PROSet/Wireless WiFi and Killer™ WiFi products that may allow an authenticated user to enable information disclosure via local access. The consolidated intel document se...

CVE-2021-0105

CVE-2021-0105 affects Intel ProSet/Wireless WiFi drivers where insecure inherited permissions in the driver stack may allow an authenticated user to disclose information or cause DoS via adjacent access. Red Hat/Intel advisories align with an Intel advisory and enumerate affected products (e.g., ...

CVE-2021-23179

CVE-2021-23179 is an out-of-bounds read in firmware for Intel Wireless Bluetooth and Killer Bluetooth products prior to version 22.120, potentially allowing a privileged user to disclose information via local access. The vulnerability is documented in Intel’s advisory (INTEL-SA-00628) and Red Hat...

CVE-2021-26254

The CVE-2021-26254 issue affects Intel PROSet/Wireless WiFi and Killer WiFi software. It is described as an out-of-bounds read that may allow a privileged user to potentially enable denial of service via local access. Intel’s advisory enumerates affected components and emphasizes mitigation throu...

CVE-2022-21197

CVE-2022-21197 (Intel PROSet/Wireless WiFi and Killer WiFi) : The issue is caused by improper input validation in Intel PROSet/Wireless WiFi software (and related Killer WiFi software) that may allow an unauthenticated attacker to cause a denial of service over the network. Affected products incl...

CVE-2022-21139

CVE-2022-21139 affects Intel PROSet/Wireless WiFi software and Killer WiFi software, where inadequate encryption strength may allow an unauthenticated user to escalate privileges via adjacent access. The advisory Intel-SA-00621 lists the affected products and notes remediation through updates to ...

CVE-2022-21160

CVE-2022-21160 affects Intel® PROSet/Wireless WiFi software before version 22.120, Killer™ WiFi software before 3.1122.1105, and UEFI v2.2.12.22071. Issue: improper buffer restrictions may allow an unauthenticated attacker to cause a denial of service via network access. Impact is DoS with potent...

CVE-2022-21212

CVE-2022-21212 affects Intel PROSet/Wireless WiFi software and Killer WiFi components with improper input validation, potentially allowing an unauthenticated user to cause Denial of Service via adjacent access. Affected: Intel PROSet/Wireless WiFi software before 22.120 and Killer WiFi software b...

CVE-2019-11151

Summary of CVE-2019-11151 : Memory corruption in Intel® WIFI Drivers and Intel® PROSet/Wireless WiFi Software before version 21.40 may allow a local attacker to escalate privileges, cause denial of service, and disclose information. Root cause : memory corruption in the Intel WIFI driver stack pr...

CVE-2020-12322

CVE-2020-12322 pertains to Intel® Wireless Bluetooth® products, with improper input validation before version 21.110 that may let an unauthenticated user cause a denial of service via adjacent access. The Red Hat and NVD entries corroborate the same vulnerability description. Intel’s advisory lis...

CVE-2019-11152

CVE-2019-11152 affects Intel(R) WIFI Drivers prior to 21.40 and is described as memory corruption that could let a privileged user achieve escalation of privilege, denial of service, and information disclosure via adjacent access. The issue is part of a cluster of Intel wireless vulnerabilities r...