Skip to content
OpenAdvisories
Medium · 5.7 CVE-2024-28049 EUVD-2024-25219GHSA-wpcc-2qm5-qrcg

Improper input validation in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi wireless products before ver…

Published Nov 13, 2024 · Updated Nov 13, 2024 · Assigned by intel

Description

Improper input validation in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi wireless products before version 23.40 may allow an unauthenticated user to enable denial of service via adjacent access.

Affected products

VendorProductAffectedFixed
— Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi wireless products before version 23.40 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 firmware-nonfree 20240610-1 —
Debian 13 firmware-nonfree 20240610-1 —
Debian 12 firmware-nonfree No fix yet —

Advisories 1

References