Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.5
CVE-2023-34983: Intel Wi-Fi Software Denial of Service Risk
CVE-2023-34983 · published 2 years ago
Summary
Some Intel Wi-Fi software versions before 22.240 may allow an attacker to shut down the software, disrupting internet access. This is a concern for organizations that rely on these devices. Users should update to the latest version of the software to mitigate this risk.
What to do
- Update intel killer to version 3.1423.712 or later.
- Update intel proset\/wireless to version 22.240 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:14.04:LTS | canonical | linux-firmware | All versions |
| Ubuntu:16.04:LTS | canonical | linux-firmware | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-firmware | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-firmware | All versions |
| Ubuntu:22.04:LTS | canonical | linux-firmware | All versions |
| Ubuntu:24.04:LTS | canonical | linux-firmware | All versions |
| Ubuntu:25.10 | canonical | linux-firmware | All versions |
| Ubuntu:26.04:LTS | canonical | linux-firmware | All versions |
| – | intel | killer |
< 3.1423.712 cpe:2.3:a:intel:killer:*:*:*:*:*:*:*:* |
| – | intel | proset\/wireless |
< 22.240 cpe:2.3:a:intel:proset\/wireless:*:*:*:*:*:*:*:* |
Original advisory text
Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service vi...
Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
References
- https://ubuntu.com/security/CVE-2023-34983 Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00947.... Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-34983 Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-20Improper Input Validation
Timeline
Published14 Feb 2024
Updated4 Nov 2026
First seen12 Aug 2026
Track software like this
Free during beta