CVE-2022-41659: 
NixOS vulnerability analysis and mitigation

Improper access control for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access. The vulnerability, identified as CVE-2022-41659, was discovered and disclosed in November 2023, affecting Intel Unison software across multiple platforms including Windows, Android, and iPhone OS (Intel Advisory).

The vulnerability has been assigned a CVSS v3.1 base score of 4.4 (MEDIUM) by NVD with the vector string CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H. Intel Corporation's own assessment rated it lower at 1.9 (LOW) with the vector string CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L. The vulnerability is classified under CWE-284 (Improper Access Control) (NVD).

The vulnerability primarily affects the availability of the system, potentially leading to denial of service conditions. The attack requires local access and high privileges to exploit, with no impact on confidentiality or integrity of the system (NVD).

Intel has released security updates to address this vulnerability. The affected versions include Intel Unison for Windows versions up to (excluding) 20.14.5683.0, Android versions up to (excluding) 20.14.4244, and iPhone OS versions up to (excluding) 20.14.2.3053 (NVD).