CVE-2022-36351

What it actually does

Improper input validation in Intel PROSet/Wireless WiFi and Killer WiFi software allows an unauthenticated adjacent attacker to trigger a denial of service condition.

Why it matters to the business

Disruption of wireless connectivity can cause operational downtime for affected systems and devices relying on the vulnerable WiFi software.

How an attack unfolds

An attacker with adjacent network access crafts and sends malformed input to the vulnerable WiFi driver or service, exploiting the validation weakness to crash or hang the component and deny service to legitimate users.

How to fix it

Upgrade affected packages to the fixed versions: webkit2gtk (Debian:11) to 2.42.3-1~deb11u1, webkit2gtk (Debian:12) to 2.42.3-1~deb12u1, webkit2gtk (Debian:13) to 2.42.3-1, and wpewebkit (Debian:13) to 2.42.3-1. Apply vendor patches for Intel PROSet/Wireless and Killer WiFi software as they become available.

How to confirm the fix worked

Verify installed package versions against the listed fixed releases using package managers on Debian systems and confirm WiFi software versions match vendor security bulletins.

Typical attack path

1. Identify systems running vulnerable Intel PROSet or Killer WiFi software on the local network segment
2. Gain adjacent wireless or wired access without authentication
3. Transmit specially crafted input that bypasses validation checks
4. Trigger resource exhaustion or crash in the WiFi component

How to detect it

Review system and application logs for unexpected crashes or restarts of WiFi-related processes and monitor for unusual input patterns on wireless interfaces.

What your security team should do

• Prioritize patching all listed Debian webkit2gtk and wpewebkit packages to the specified fixed versions
• Inventory systems using Intel PROSet or Killer WiFi software and apply available updates
• Monitor adjacent network traffic for anomalous patterns targeting wireless interfaces