CVE-2023-32644

What it actually does

A protection mechanism failure in the Intel PROSet/Wireless and Killer Wi-Fi drivers allows an adjacent unauthenticated attacker to trigger a denial of service condition that disrupts wireless connectivity.

Why it matters to the business

Wireless network interruptions can halt productivity for users relying on Wi-Fi, increase support tickets, and create temporary loss of network-dependent operations until the system is restarted or the driver recovers.

How an attack unfolds

An attacker positioned within wireless range crafts and sends specially formed management or data frames that bypass the driver's input validation checks, causing the driver to enter an error state and drop all connections or crash the wireless interface.

How to fix it

Upgrade Intel PROSet/Wireless and Killer Wi-Fi software to version 22.240 or later on all affected systems. Apply vendor-supplied updates through standard driver management channels and verify the installed version after deployment.

How to confirm the fix worked

Query the installed driver version on endpoints using vendor tools or system inventory; confirm the version is 22.240 or newer. Perform wireless connectivity tests from adjacent locations to ensure frames no longer cause interface resets.

Typical attack path

1. Position within adjacent wireless range of the target system
2. Transmit crafted 802.11 frames targeting the vulnerable driver components
3. Trigger the protection failure resulting in driver instability or interface reset
4. Repeat as needed to maintain denial of service

How to detect it

Review system and driver logs for repeated wireless interface resets or crashes coinciding with periods of high adjacent wireless activity; correlate with endpoint event logs showing unexpected loss of network connectivity.

What your security team should do

• Prioritize driver updates across all managed endpoints within the next maintenance window
• Include wireless driver versions in regular vulnerability scanning and asset inventory
• Monitor vendor security bulletins for subsequent updates to the same components