CVE-2021-23168
Fixed in a distro release EPSS <1%CVSS 6.5
Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Products: intel wireless-ac_9560_firmware, intel dual_band_wireless-ac_3165_firmware, intel dual_band_wireless-ac_3168_firmware, intel wireless-ac_9462_firmware, intel wireless-ac_9461_firmware, intel killer_ac_1550_firmware, intel killer_wi-fi_6_ax1650_firmware, intel dual_band_wireless-ac_8260_firmware, intel dual_band_wireless-ac_8265_firmware, intel killer_wi-fi_6e_ax1690_firmware, intel killer_wi-fi_6e_ax1675_firmware, intel wireless-ac_9260_firmware, intel proset_wi-fi_6e_ax210_firmware, intel wi-fi_6e_ax211_firmware, intel wi-fi_6_ax200_firmware, intel wi-fi_6_ax201_firmware, intel wi-fi_6e_ax411_firmware, intel wireless_7265_(rev_d)_firmware
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 10 | firmware-nonfree | 20190114+really20220913-0+deb10u1 |
| Debian 12 | firmware-nonfree | 20220913-1 |
| Debian 13 | firmware-nonfree | 20220913-1 |
| Debian 14 | firmware-nonfree | 20220913-1 |