CVE-2023-28374

What it actually does

Improper input validation in the wireless software allows an unauthenticated adjacent attacker to trigger a denial of service condition that crashes or destabilizes the affected component.

Why it matters to the business

Wireless connectivity can be disrupted for affected systems, leading to loss of network access, reduced productivity, and potential downtime until the service is restored or devices are rebooted.

How an attack unfolds

An attacker within radio range crafts malformed wireless frames or management packets and sends them to a vulnerable Intel PROSet/Wireless or Killer Wi-Fi installation; the software fails to validate the input and enters a denial-of-service state.

How to fix it

Upgrade Intel PROSet/Wireless and Killer Wi-Fi software to version 22.240 or later. For systems also running unbound, apply the Debian packages listed: 1.13.1-1+deb11u3 on Debian 11 and 1.21.1-1 on Debian 14.

How to confirm the fix worked

Confirm the installed wireless driver version meets or exceeds 22.240; re-test wireless connectivity after upgrade and monitor for absence of crashes under adjacent traffic.

Typical attack path

1. Locate a target device using the vulnerable wireless driver within adjacent range
2. Craft and transmit malformed 802.11 frames or management packets
3. Trigger the improper input validation path
4. Cause service crash or persistent DoS until manual intervention

How to detect it

Review wireless driver logs and system event logs for unexpected crashes or restarts coinciding with high volumes of malformed 802.11 traffic from unknown sources.

What your security team should do

• Prioritize patching wireless drivers on all endpoints before the CISA due date if applicable
• Disable unnecessary adjacent wireless interfaces where feasible
• Monitor vendor advisories for additional Intel and Killer Wi-Fi updates