What’s Vulnerable › Vulnerabilities
CVE-2022-38076
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2023-08-11 · updated 2026-06-17
- Weakness: CWE-20
Description
Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected products
- Debian Linux: 10.0
- Fedoraproject Fedora: 37, 38, 39
- Intel Killer: before 34.22.1163 — fixed in 34.22.1163
- Intel(R) PROSet/Wireless WiFi Software for Windows: before 22.200 — fixed in 22.200
- Intel Uefi Firmware: before 3.2.20.23023 — fixed in 3.2.20.23023
How to fix
Upgrade to a fixed version: Intel Killer 34.22.1163; Intel(R) PROSet/Wireless WiFi Software for Windows 22.200; Intel Uefi Firmware 3.2.20.23023. Check the vendor advisory for mitigations.
References
- http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00766.html
- https://lists.debian.org/debian-lts-announce/2023/09/msg00043.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HUCYUR4WBTELCRHELISJ3RMZVHKIV5TN/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K24OJT4AVMNND7LBTC2ZDDTE6DJHAKB4/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y76A3PLHIQCEPESB4XVBV5SRRXQEZ5JY/
- http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00766.html
- https://lists.debian.org/debian-lts-announce/2023/09/msg00043.html
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HUCYUR4WBTELCRHELISJ3RMZVHKIV5TN/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K24OJT4AVMNND7LBTC2ZDDTE6DJHAKB4/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y76A3PLHIQCEPESB4XVBV5SRRXQEZ5JY/
Get alerted when CVE-2022-38076 or the next vulnerability affects your stack