Patchwire CVEs, their patch status, and feeds to follow them

CVE-2021-37409

Fixed in a distro release EPSS <1%CVSS 7.8

Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.

Published 2022-08-18 · CVE record · OSV

Products: intel wireless-ac_9560_firmware, intel wireless-ac_9462_firmware, intel wireless-ac_9461_firmware, intel killer_ac_1550_firmware, intel killer_wi-fi_6_ax1650_firmware, intel killer_wi-fi_6e_ax1690_firmware, intel killer_wi-fi_6e_ax1675_firmware, intel wireless-ac_9260_firmware, intel proset_wi-fi_6e_ax210_firmware, intel wi-fi_6e_ax211_firmware, intel wi-fi_6_ax200_firmware, intel wi-fi_6_ax201_firmware, intel wi-fi_6e_ax411_firmware

Distro releases

ReleasePackageFixed in
Debian 10firmware-nonfree20190114+really20220913-0+deb10u1
Debian 12firmware-nonfree20220913-1
Debian 13firmware-nonfree20220913-1
Debian 14firmware-nonfree20220913-1