CVE-2021-0166
Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel(R) PROSet...
Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access.
- Record
CVE-2021-0166- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 4.6 Medium
AV:L/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List
Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access.
- Record
CVE-2021-0166- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-200
- Updated
- 2026-11-02
EUVDEUVD-2021-2785
Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access.
- Record
EUVD-2021-2785- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-x2mv-gw47-hcqc
Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel(R) PROSet...
Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access.
- Record
GHSA-x2mv-gw47-hcqc- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-200
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2021-0166
Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Killer(TM) Wi-Fi in Windows 10 and 11 may allow a privileged user to potentially enable escalation of privilege via local access.
- Record
UBUNTU-CVE-2021-0166- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2022-0065 No score
Updated nonfree firmware packages fix security vulnerabilities
This update provides new and updated nonfree firmwares and fixes at least the following security issues:
Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi may allow an unauthenticated user to potentially enable escalation of privilege via local access (CVE-2021-0066 / SA-00539).
Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi may allow a privileged user to potentially enable information disclosure via local access (CVE-2021-0072 / SA-00539).
Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel(R) PROSet/Wireless Wi-Fi may allow a privileged user to potentially enable denial of service via local access (CVE-2021-0076 / SA-00539).
Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi may allow a privileged user to potentially enable escalation of privilege via local access (CVE-2021-0161, CVE-2021-0168 / SA-00539).
Improper access control in firmware for Intel(R) PROSet/Wireless Wi-Fi may allow an unauthenticated user to potentially enable escalation of privilege via local access (CVE-2021-0164 / SA-00539).
Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi may allow an unauthenticated user to potentially enable denial of service via adjacent access (CVE-2021-0165 / SA-00539).
Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel(R) PROSet/Wireless Wi-Fi may allow a privileged user to potentially enable escalation of privilege via local access (CVE-2021-0166 / SA-00539).
Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel(R) PROSet/Wireless Wi-Fi may allow an authenticated user to potentially enable information disclosure via local access (CVE-2021-0170 / SA-00539).
Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi may allow an unauthenticated user to potentially enable denial of service via adjacent access (CVE-2021-0172 / SA-00539).
Improper Validation of Consistency within input in firmware for some Intel(R) PROSet/Wireless Wi-Fi may allow a unauthenticated user to potentially enable denial of service via adjacent access (CVE-2021-0173 / SA-00539).
Improper Use of Validation Framework in firmware for some Intel(R) PROSet/ Wireless Wi-Fi may allow a unauthenticated user to potentially enable denial of service via adjacent access (CVE-2021-0174 / SA-00539).
Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel(R) PROSet/Wireless Wi-Fi may allow an unauthenticated user to potentially enable denial of service via adjacent access (CVE-2021-0175 / SA-00539).
Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi may allow a privileged user to potentially enable denial of service via local access (CVE-2021-0176 / SA-00539).
Improper conditions check in firmware for some Intel(R) Wireless Bluetooth(R) products may allow an authenticated user to potentially enable denial of service via adjacent access (CVE-2021-33139 / SA-00604).
Improper input validation in firmware for some Intel(R) Wireless Bluetooth(R) products may allow an authenticated user to potentially enable denial of service via adjacent access (CVE-2021-33155 / SA-00604).
Full list of firmware changes/updates:
- kernel-firmware-nonfree:
- cnm: add chips&media wave521c firmware
- cxgb4: Update firmware to revision 1.26.6.0
- i915: Add DMC firmware v2.16 for ADL-P
- marvell: add CPT firmware images
- mediatek: add firmware for MT7916
- mediatek: update firmware for MT7915
- mediatek: update firmware for MT7921 bluetooth chip
- mediatek: update firmware for MT7921 WiFi device
- mediatek: Update MT8173 VPU firmware to v1.1.7
- Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
- QCA: Add Bluetooth nvm file for WCN685x
- QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324 -…
- Record
MGASA-2022-0065- Updated
- 2026-11-02
OSVopenSUSE-SU-2022:1065-1 No score
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues:
Update Intel Wireless firmware for 9xxx (INTEL-SA-00539, bsc#1196333):
CVE-2021-0161: Improper input validation in firmware for Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2021-0164: Improper access control in firmware for Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi may allow an unauthenticated user to potentially enable escalation of privilege via local access. CVE-2021-0165: Improper input validation in firmware for Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi may allow an unauthenticated user to potentially enable denial of service via adjacent access. CVE-2021-0066: Improper input validation in firmware for Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi may allow an unauthenticated user to potentially enable escalation of privilege via local access. CVE-2021-0166: Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2021-0168: Improper input validation in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2021-0170: Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow an authenticated user to potentially enable information disclosure via local access. CVE-2021-0172: Improper input validation in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow an unauthenticated user to potentially enable denial of service via adjacent access. CVE-2021-0173: Improper Validation of Consistency within input in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a unauthenticated user to potentially enable denial of service via adjacent access. CVE-2021-0174: Improper Use of Validation Framework in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a unauthenticated user to potentially enable denial of service via adjacent access. CVE-2021-0175: Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow an unauthenticated user to potentially enable denial of service via adjacent access. CVE-2021-0076: Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a privileged user to potentially enable denial of service via local access. CVE-2021-0176: Improper input validation in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a privileged user to potentially enable denial of service via local access. CVE-2021-0183: Improper Validation of Specified Index, Position, or Offset in Input in software for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow an unauthenticated user to potentially enable denial of service via adjacent access. CVE-2021-0072: Improper input validation in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a privileged user to potentially enable information disclosure via local access. CVE-2021-0071: Improper input validation in firmware for some Intel PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
Update Intel Bluetooth firmware (INTEL-SA-00604,bsc#1195786):
- CVE-2021-33139: Improper conditions check in firmware for some Intel Wireless Bluetooth and Killer Bluetooth products before may allow an authenticated user to potentially enable denial of service via adjacent access.
- CVE-2021-33155: Improper input validation in firmware for some Intel Wireless Bluetooth and Killer Bluetooth products…
- Record
openSUSE-SU-2022:1065-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:0721-1 No score
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues:
- Update Intel Wireless firmware for 9xxx (CVE-2021-0161, CVE-2021-0164,CVE-2021-0165,CVE-2021-0066,CVE-2021-0166, CVE-2021-0168,CVE-2021-0170,CVE-2021-0172,CVE-2021-0173, CVE-2021-0174,CVE-2021-0175,CVE-2021-0076,CVE-2021-0176, CVE-2021-0183,CVE-2021-0072,INTEL-SA-00539,bsc#1196333): iwlwifi-9000-pu-b0-jf-b0-46.ucode iwlwifi-9000-pu-b0-jf-b0-46.ucode
- Update Intel Bluetooth firmware (CVE-2021-33139,CVE-2021-33155, INTEL-SA-00604,bsc#1195786)
- Record
SUSE-SU-2022:0721-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1065-1 No score
Security update for kernel-firmware
This update for kernel-firmware fixes the following issues:
Update Intel Wireless firmware for 9xxx (INTEL-SA-00539, bsc#1196333):
CVE-2021-0161: Improper input validation in firmware for Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2021-0164: Improper access control in firmware for Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi may allow an unauthenticated user to potentially enable escalation of privilege via local access. CVE-2021-0165: Improper input validation in firmware for Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi may allow an unauthenticated user to potentially enable denial of service via adjacent access. CVE-2021-0066: Improper input validation in firmware for Intel PROSet/Wireless Wi-Fi and Killer Wi-Fi may allow an unauthenticated user to potentially enable escalation of privilege via local access. CVE-2021-0166: Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2021-0168: Improper input validation in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2021-0170: Exposure of Sensitive Information to an Unauthorized Actor in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow an authenticated user to potentially enable information disclosure via local access. CVE-2021-0172: Improper input validation in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow an unauthenticated user to potentially enable denial of service via adjacent access. CVE-2021-0173: Improper Validation of Consistency within input in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a unauthenticated user to potentially enable denial of service via adjacent access. CVE-2021-0174: Improper Use of Validation Framework in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a unauthenticated user to potentially enable denial of service via adjacent access. CVE-2021-0175: Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow an unauthenticated user to potentially enable denial of service via adjacent access. CVE-2021-0076: Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a privileged user to potentially enable denial of service via local access. CVE-2021-0176: Improper input validation in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a privileged user to potentially enable denial of service via local access. CVE-2021-0183: Improper Validation of Specified Index, Position, or Offset in Input in software for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow an unauthenticated user to potentially enable denial of service via adjacent access. CVE-2021-0072: Improper input validation in firmware for some Intel PROSet/Wireless Wi-Fi and some Killer Wi-Fi may allow a privileged user to potentially enable information disclosure via local access. CVE-2021-0071: Improper input validation in firmware for some Intel PROSet/Wireless WiFi in UEFI may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
Update Intel Bluetooth firmware (INTEL-SA-00604,bsc#1195786):
- CVE-2021-33139: Improper conditions check in firmware for some Intel Wireless Bluetooth and Killer Bluetooth products before may allow an authenticated user to potentially enable denial of service via adjacent access.
- CVE-2021-33155: Improper input validation in firmware for some Intel Wireless Bluetooth and Killer Bluetooth products…
- Record
SUSE-SU-2022:1065-1- Updated
- 2026-11-02
Affected products
- intel amt ac 8260 firmware
- intel amt ac 8265 firmware
- intel amt ac 9260 firmware
- intel amt ac 9560 firmware
- intel amt wi-fi 6 ax200 firmware
- intel amt wi-fi 6 ax201 firmware
- intel amt wi-fi 6 ax210 firmware
- intel killer ac 1550 firmware
- intel killer wi-fi 6 ax1650 firmware
- intel killer wi-fi 6e ax1675 firmware
- intel proset ac 3165 firmware
- intel proset ac 3168 firmware
Show 10 moreShow less
- intel proset ac 8260 firmware
- intel proset ac 8265 firmware
- intel proset ac 9260 firmware
- intel proset ac 9461 firmware
- intel proset ac 9462 firmware
- intel proset ac 9560 firmware
- intel proset wi-fi 6 ax200 firmware
- intel proset wi-fi 6 ax201 firmware
- intel proset wi-fi 6e ax210 firmware
- intel proset wireless 7265 \(rev d\) firmware
Affected packages
| Package | Affected | Fixed |
|---|---|---|
kernel-firmware-nonfreeMageia:8 From an advisory covering 16 CVEs |
before 20220209-1.mga8.nonfree | 20220209-1.mga8.nonfree |
radeon-firmwareMageia:8 From an advisory covering 16 CVEs |
before 20220209-1.mga8.nonfree | 20220209-1.mga8.nonfree |
kernel-firmwareSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 17 CVEs |
before 20200107-3.26.1 | 20200107-3.26.1 |
kernel-firmwareSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 17 CVEs |
before 20200107-3.26.1 | 20200107-3.26.1 |
kernel-firmwareSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS From an advisory covering 17 CVEs |
before 20200107-3.26.1 | 20200107-3.26.1 |
kernel-firmwareSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS From an advisory covering 17 CVEs |
before 20200107-3.26.1 | 20200107-3.26.1 |
kernel-firmwareSUSE:Linux Enterprise Real Time 15 SP2 From an advisory covering 17 CVEs |
before 20200107-3.26.1 | 20200107-3.26.1 |
kernel-firmwareSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 17 CVEs |
before 20200107-3.26.1 | 20200107-3.26.1 |
kernel-firmwareSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 17 CVEs |
before 20200107-3.26.1 | 20200107-3.26.1 |
kernel-firmwareSUSE:Linux Enterprise Server 15 SP2-BCL From an advisory covering 17 CVEs |
before 20200107-3.26.1 | 20200107-3.26.1 |
Show 21 moreShow less
| Package | Affected | Fixed |
|---|---|---|
kernel-firmwareSUSE:Linux Enterprise Server 15 SP2-LTSS From an advisory covering 17 CVEs |
before 20200107-3.26.1 | 20200107-3.26.1 |
kernel-firmwareSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 17 CVEs |
before 20200107-3.26.1 | 20200107-3.26.1 |
kernel-firmwareSUSE:Linux Enterprise Server for SAP Applications 15 SP2 From an advisory covering 17 CVEs |
before 20200107-3.26.1 | 20200107-3.26.1 |
kernel-firmwareSUSE:Manager Proxy 4.1 From an advisory covering 17 CVEs |
before 20200107-3.26.1 | 20200107-3.26.1 |
kernel-firmwareSUSE:Manager Retail Branch Server 4.1 From an advisory covering 17 CVEs |
before 20200107-3.26.1 | 20200107-3.26.1 |
kernel-firmwareSUSE:Manager Server 4.1 From an advisory covering 17 CVEs |
before 20200107-3.26.1 | 20200107-3.26.1 |
kernel-firmwareSUSE:Linux Enterprise Micro 5.0 From an advisory covering 17 CVEs |
before 20200107-3.26.1 | 20200107-3.26.1 |
kernel-firmwareSUSE:Enterprise Storage 6 From an advisory covering 17 CVEs |
before 20200107-3.26.1 | 20200107-3.26.1 |
kernel-firmwareSUSE:Enterprise Storage 7 From an advisory covering 17 CVEs |
before 20200107-3.26.1 | 20200107-3.26.1 |
kernel-firmwareSUSE:Linux Enterprise Module for Basesystem 15 SP3 From an advisory covering 18 CVEs |
before 20210208-150300.4.7.1 | 20210208-150300.4.7.1 |
kernel-firmwareSUSE:Linux Enterprise Micro 5.1 From an advisory covering 18 CVEs |
before 20210208-150300.4.7.1 | 20210208-150300.4.7.1 |
linux-firmwareUbuntu:14.04:LTS |
All versions, plus listed versions 1.1161.1171.1181.1191.121 Show 26 moreShow less1.1221.1231.1241.1251.1261.1271.127.21.127.31.127.41.127.51.127.61.127.71.127.81.127.101.127.111.127.121.127.131.127.141.127.151.127.161.127.181.127.191.127.201.127.221.127.231.127.24 |
None known |
linux-firmwareUbuntu:16.04:LTS |
All versions, plus listed versions 1.1491.1501.1521.1531.154 Show 24 moreShow less1.1551.1561.1571.157.11.157.21.157.31.157.41.157.51.157.61.157.81.157.101.157.111.157.121.157.131.157.141.157.151.157.161.157.171.157.181.157.191.157.201.157.211.157.221.157.23 |
None known |
linux-firmwareUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.1691.1701.1711.1721.173 Show 17 moreShow less1.173.11.173.21.173.31.173.51.173.61.173.81.173.91.173.121.173.131.173.141.173.151.173.161.173.171.173.181.173.191.173.201.173.21 |
None known |
linux-firmwareUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 1.1831.183.11.183.21.1841.185 Show 34 moreShow less1.1861.1871.187.11.187.21.187.31.187.41.187.61.187.71.187.81.187.91.187.101.187.111.187.121.187.141.187.151.187.161.187.171.187.191.187.201.187.231.187.241.187.251.187.261.187.271.187.291.187.301.187.311.187.321.187.331.187.341.187.351.187.361.187.381.187.39 |
None known |
linux-firmwareUbuntu:22.04:LTS |
All versions, plus listed versions 1.2011.2021.20420220124.git0c6a7b3b-0ubuntu120220217.git6342082c-0ubuntu1 Show 39 moreShow less20220217.git6342082c-0ubuntu320220302.gitee0667aa-0ubuntu120220314.gitcd01f857-0ubuntu120220314.gitcd01f857-0ubuntu220220329.git681281e4-0ubuntu120220329.git681281e4-0ubuntu320220329.git681281e4-0ubuntu3.220220329.git681281e4-0ubuntu3.320220329.git681281e4-0ubuntu3.420220329.git681281e4-0ubuntu3.520220329.git681281e4-0ubuntu3.620220329.git681281e4-0ubuntu3.720220329.git681281e4-0ubuntu3.920220329.git681281e4-0ubuntu3.1020220329.git681281e4-0ubuntu3.1120220329.git681281e4-0ubuntu3.1220220329.git681281e4-0ubuntu3.1320220329.git681281e4-0ubuntu3.1420220329.git681281e4-0ubuntu3.1620220329.git681281e4-0ubuntu3.1720220329.git681281e4-0ubuntu3.1820220329.git681281e4-0ubuntu3.1920220329.git681281e4-0ubuntu3.2120220329.git681281e4-0ubuntu3.2220220329.git681281e4-0ubuntu3.2320220329.git681281e4-0ubuntu3.2420220329.git681281e4-0ubuntu3.2620220329.git681281e4-0ubuntu3.2920220329.git681281e4-0ubuntu3.3020220329.git681281e4-0ubuntu3.3120220329.git681281e4-0ubuntu3.3420220329.git681281e4-0ubuntu3.3520220329.git681281e4-0ubuntu3.3620220329.git681281e4-0ubuntu3.3720220329.git681281e4-0ubuntu3.3820220329.git681281e4-0ubuntu3.3920220329.git681281e4-0ubuntu3.4020220329.git681281e4-0ubuntu3.4120220329.git681281e4-0ubuntu3.42 |
None known |
linux-firmwareUbuntu:24.04:LTS |
All versions, plus listed versions 20230919.git3672ccab-0ubuntu2.120230919.git3672ccab-0ubuntu2.220240202.git36777504-0ubuntu120240318.git3b128b60-0ubuntu120240318.git3b128b60-0ubuntu2 Show 24 moreShow less20240318.git3b128b60-0ubuntu2.120240318.git3b128b60-0ubuntu2.220240318.git3b128b60-0ubuntu2.320240318.git3b128b60-0ubuntu2.420240318.git3b128b60-0ubuntu2.520240318.git3b128b60-0ubuntu2.620240318.git3b128b60-0ubuntu2.720240318.git3b128b60-0ubuntu2.920240318.git3b128b60-0ubuntu2.1020240318.git3b128b60-0ubuntu2.1120240318.git3b128b60-0ubuntu2.1220240318.git3b128b60-0ubuntu2.1320240318.git3b128b60-0ubuntu2.1420240318.git3b128b60-0ubuntu2.1520240318.git3b128b60-0ubuntu2.1720240318.git3b128b60-0ubuntu2.1920240318.git3b128b60-0ubuntu2.2120240318.git3b128b60-0ubuntu2.2220240318.git3b128b60-0ubuntu2.2320240318.git3b128b60-0ubuntu2.2520240318.git3b128b60-0ubuntu2.2620240318.git3b128b60-0ubuntu2.2720240318.git3b128b60-0ubuntu2.2920240318.git3b128b60.0ubuntu3.1 |
None known |
linux-firmwareUbuntu:25.10 |
All versions, plus listed versions 20250317.git1d4c88ee-0ubuntu120250606.git3b75d677-0ubuntu120250701.gite2dad11e-0ubuntu120250711.git99d64b4f-0ubuntu120250807.gitb6b0b152-0ubuntu1 Show 10 moreShow less20250818.git07ed893d-0ubuntu120250901.git993ff19b-0ubuntu120250901.git993ff19b-0ubuntu1.220250901.git993ff19b-0ubuntu1.420250901.git993ff19b-0ubuntu1.520250901.git993ff19b-0ubuntu1.620250901.git993ff19b-0ubuntu1.720250901.git993ff19b-0ubuntu1.920250901.git993ff19b-0ubuntu1.1020250901.git993ff19b-0ubuntu1.11 |
None known |
linux-firmwareUbuntu:26.10 |
All versions, plus listed versions 20260319.git217ca6e4.1ubuntu20260709.git2c35b1ed.1ubuntu20260818.giteeed587f.1ubuntu20260911.giteeccccbe.1ubuntu20260915.git1522c78a.1ubuntu |
None known |
linux-firmwareUbuntu:26.04:LTS |
All versions, plus listed versions 20250901.git993ff19b-0ubuntu120251009.git46a6999a-0ubuntu120251029.git4f72031f-0ubuntu120251125.gitff6418d1-0ubuntu120260108.gitd86b47f7-0ubuntu1 Show 4 moreShow less20260123.git1b7b9f6c.0ubuntu20260227.gitd8e138dd.0ubuntu20260319.git217ca6e4.0ubuntu20260319.git217ca6e4.1ubuntu |
None known |
kernel-firmwareopenSUSE:Leap 15.3 From an advisory covering 18 CVEs |
before 20210208-150300.4.7.1 | 20210208-150300.4.7.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-0166 is a medium vulnerability (CVSS 6.7) in Intel Amt Ac 8260 Firmware, published February 9, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.29%, the 22nd percentile. No source names a fixed version.
References
intel.com/content/www/us/en/security-center/advisory/intel-sa-00539.html
nvd.nist.gov/vuln/detail/CVE-2021-0166
github.com/advisories/GHSA-x2mv-gw47-hcqc
advisories.mageia.org/MGASA-2022-0065.html
bugs.mageia.org/show_bug.cgi?id=30038
Show 28 moreShow less
suse.com/support/update/announcement/2022/suse-su-20220721-1
bugzilla.suse.com/1195786
ubuntu.com/security/CVE-2021-0166
cve.org/CVERecord?id=CVE-2021-0166
lists.opensuse.org/archives/list/[email protected]/thread/QNS2QRVZ2MWL6BB6UKZX6H5IFTGR7LZ2
Left out here: the rest of 3 source descriptions. The JSON record has them.