Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation o…

published 2023-08-11 3 y ago modified 2026-06-17 4 mo ago also EUVD-2022-49146

cvss: 8.2; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 0.3%; EPSS 0.3% chance of exploitation in 30 days, percentile 20%
public exploits: 0; none known

Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.

Patch / fix

fixed in 3 distros 4 links 1

intel killer 34.22.1163
intel proset/wireless_wifi 22.200
intel uefi_firmware 3.2.20.23023

debian red hat almalinux rocky linux

firmware-nonfree Debian 14, Debian 13 20240610-1

debian advisories DEBIAN-CVE-2022-46329

linux-firmware RHEL 8 20240111-121.gitb3132c18.el8
iwl100-firmware RHEL 8 39.31.5.1-121.el8.1
iwl105-firmware RHEL 8 18.168.6.1-121.el8.1
iwl135-firmware RHEL 8 18.168.6.1-121.el8.1
iwl1000-firmware RHEL 8 1:39.31.5.1-121.el8.1
iwl2000-firmware RHEL 8 18.168.6.1-121.el8.1
iwl2030-firmware RHEL 8 18.168.6.1-121.el8.1
iwl3160-firmware RHEL 8 1:25.30.13.0-121.el8.1

red hat advisories RHSA-2024:4575 RHSA-2024:3178 RHSA-2024:1112 RHSA-2024:3939 RHSA-2024:3422 RHSA-2024:2583

linux-firmware AlmaLinux 8 20240111-121.gitb3132c18.el8
iwl100-firmware AlmaLinux 8 39.31.5.1-121.el8.1
iwl105-firmware AlmaLinux 8 18.168.6.1-121.el8.1
iwl135-firmware AlmaLinux 8 18.168.6.1-121.el8.1
iwl1000-firmware AlmaLinux 8 1:39.31.5.1-121.el8.1
iwl2000-firmware AlmaLinux 8 18.168.6.1-121.el8.1
iwl2030-firmware AlmaLinux 8 18.168.6.1-121.el8.1
iwl3160-firmware AlmaLinux 8 1:25.30.13.0-121.el8.1

almalinux advisories ALSA-2024:3178 ALSA-2023:6595

linux-firmware Rocky Linux 8 20240111-121.gitb3132c18.el8

rocky linux advisories RLSA-2024:3178

intel.com/content/www/us/en/security-center/advisory/intel-sa-00766.… advisory

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2022-46329 updated 2026-08-06 cvss 8.2

hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi

Red Hat Enterprise Linux BaseOS (v. 8) iwl100-firmware 39.31.5.1-121.el8.1, iwl5150-firmware 8.24.2.2-121.el8.1, iwl1000-firmware 39.31.5.1-121.el8.1, iwl105-firmware 18.168.6.1-121.el8.1, iwl135-firmware 18.168.6.1-121.el8.1, iwl3945-firmware 15.32.2.9-121.el8.1, +15 more
fixed: vendor fix RHSA-2024:3178
Red Hat Enterprise Linux BaseOS (v. 9) linux-firmware 20230814-140.el9_3, iwl100-firmware 39.31.5.1-140.el9_3, iwl5150-firmware 8.24.2.2-140.el9_3, iwl1000-firmware 39.31.5.1-140.el9_3, iwl105-firmware 18.168.6.1-140.el9_3, iwl135-firmware 18.168.6.1-140.el9_3, +11 more
fixed: vendor fix RHSA-2023:6595
Red Hat Enterprise Linux BaseOS AUS (v. 8.2) iwl100-firmware 39.31.5.1-102.el8_2.1, iwl5150-firmware 8.24.2.2-102.el8_2.1, iwl1000-firmware 39.31.5.1-102.el8_2.1, iwl105-firmware 18.168.6.1-102.el8_2.1, iwl135-firmware 18.168.6.1-102.el8_2.1, iwl3945-firmware 15.32.2.9-102.el8_2.1, +15 more
fixed: vendor fix RHSA-2024:4575
Red Hat Enterprise Linux BaseOS AUS (v.8.4) iwl100-firmware 39.31.5.1-106.el8_4.1, iwl5150-firmware 8.24.2.2-106.el8_4.1, iwl1000-firmware 39.31.5.1-106.el8_4.1, iwl105-firmware 18.168.6.1-106.el8_4.1, iwl135-firmware 18.168.6.1-106.el8_4.1, iwl3945-firmware 15.32.2.9-106.el8_4.1, +15 more Red Hat Enterprise Linux BaseOS E4S (v.8.4) iwl100-firmware 39.31.5.1-106.el8_4.1, iwl5150-firmware 8.24.2.2-106.el8_4.1, iwl1000-firmware 39.31.5.1-106.el8_4.1, iwl105-firmware 18.168.6.1-106.el8_4.1, iwl135-firmware 18.168.6.1-106.el8_4.1, iwl3945-firmware 15.32.2.9-106.el8_4.1, +15 more
fixed: vendor fix RHSA-2024:2583
Red Hat Enterprise Linux BaseOS EUS (v.8.6) iwl100-firmware 39.31.5.1-114.el8_6.1, iwl5150-firmware 8.24.2.2-114.el8_6.1, iwl1000-firmware 39.31.5.1-114.el8_6.1, iwl105-firmware 18.168.6.1-114.el8_6.1, iwl135-firmware 18.168.6.1-114.el8_6.1, iwl3945-firmware 15.32.2.9-114.el8_6.1, +15 more
fixed: vendor fix RHSA-2024:1112
Red Hat Enterprise Linux BaseOS EUS (v.8.8) iwl100-firmware 39.31.5.1-118.el8_8.1, iwl5150-firmware 8.24.2.2-118.el8_8.1, iwl1000-firmware 39.31.5.1-118.el8_8.1, iwl105-firmware 18.168.6.1-118.el8_8.1, iwl135-firmware 18.168.6.1-118.el8_8.1, iwl3945-firmware 15.32.2.9-118.el8_8.1, +15 more
fixed: vendor fix RHSA-2024:0577
Red Hat Enterprise Linux BaseOS EUS (v.9.0) linux-firmware 20220209-130.el9_0, iwl100-firmware 39.31.5.1-130.el9_0, iwl5150-firmware 8.24.2.2-130.el9_0, iwl1000-firmware 39.31.5.1-130.el9_0, iwl105-firmware 18.168.6.1-130.el9_0, iwl135-firmware 18.168.6.1-130.el9_0, +11 more
fixed: vendor fix RHSA-2024:3422
Red Hat Enterprise Linux BaseOS EUS (v.9.2) linux-firmware 20230310-138.el9_2, iwl100-firmware 39.31.5.1-138.el9_2, iwl5150-firmware 8.24.2.2-138.el9_2, iwl1000-firmware 39.31.5.1-138.el9_2, iwl105-firmware 18.168.6.1-138.el9_2, iwl135-firmware 18.168.6.1-138.el9_2, +11 more
fixed: vendor fix RHSA-2024:0449

show 2 more

Red Hat Enterprise Linux BaseOS TUS (v.8.4) iwl100-firmware 39.31.5.1-106.el8_4.1, iwl5150-firmware 8.24.2.2-106.el8_4.1, iwl1000-firmware 39.31.5.1-106.el8_4.1, iwl105-firmware 18.168.6.1-106.el8_4.1, iwl135-firmware 18.168.6.1-106.el8_4.1, iwl3945-firmware 15.32.2.9-106.el8_4.1, +15 more
fixed: vendor fix RHSA-2024:2583
Red Hat Enterprise Linux Client (v. 7) iwl100-firmware 39.31.5.1-83.el7_9, iwl5150-firmware 8.24.2.2-83.el7_9, iwl1000-firmware 39.31.5.1-83.el7_9, iwl105-firmware 18.168.6.1-83.el7_9, iwl135-firmware 18.168.6.1-83.el7_9, iwl3945-firmware 15.32.2.9-83.el7_9, +11 more Red Hat Enterprise Linux Server (v. 7) iwl100-firmware 39.31.5.1-83.el7_9, iwl5150-firmware 8.24.2.2-83.el7_9, iwl1000-firmware 39.31.5.1-83.el7_9, iwl105-firmware 18.168.6.1-83.el7_9, iwl135-firmware 18.168.6.1-83.el7_9, iwl3945-firmware 15.32.2.9-83.el7_9, +11 more Red Hat Enterprise Linux Workstation (v. 7) iwl100-firmware 39.31.5.1-83.el7_9, iwl5150-firmware 8.24.2.2-83.el7_9, iwl1000-firmware 39.31.5.1-83.el7_9, iwl105-firmware 18.168.6.1-83.el7_9, iwl135-firmware 18.168.6.1-83.el7_9, iwl3945-firmware 15.32.2.9-83.el7_9, +11 more
fixed: vendor fix RHSA-2024:3939

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: total
Assessed: 2 y ago (2024-10-10)

Exploit prediction

0.28% chance of exploitation in the next 30 days, higher than 20% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	3.1	8.2	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
NVD	3.1	6.7	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

n/a Intel(R) PROSet/Wireless WiFi software

Classification

Weakness

CWE-693 Protection Mechanism Failure

References

intel.com /content/www/us/en/security-center/advisory/intel-sa-00766.html
patch, vendor-advisory
lists.fedoraproject.org /archives/list/package-announce@lists.fedoraproject.org/message/K24OJT4AVMNND7LBTC2ZDDTE6DJHAKB4/
third-party-advisory
lists.fedoraproject.org /archives/list/package-announce@lists.fedoraproject.org/message/HUCYUR4WBTELCRHELISJ3RMZVHKIV5TN/
third-party-advisory
lists.fedoraproject.org /archives/list/package-announce@lists.fedoraproject.org/message/Y76A3PLHIQCEPESB4XVBV5SRRXQEZ5JY/
third-party-advisory
lists.debian.org /debian-lts-announce/2023/09/msg00043.html
mailing-list, third-party-advisory

Sources

CVE List CVE-2022-46329
NVD CVE-2022-46329

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary