TL;DR: If you're using a linux based AP, check if you're using iwd. If you are, you need to update immediately. Alternatively, if you're using an OpenWRT based router you're good.

It's not clear to me yet if this is specific to intel wireless devices (edit: the IWD wiki page says that it aims to be "a comprehensive Wi-Fi connectivity solution for Linux based devices" so it looks like it would cover any system using IWD, not just Intel AP's).

The article says "everyone using IWD as an access point" and "affects home WiFi networks".

So I went to the good ol' Arch wiki and it gives some details on iwd:

https://wiki.archlinux.org/title/Iwd

Long story short it looks like at a minimum you would need the iwd package installed on a linux based access point (think open source based routers and probably many ISP ones) and an easy way to test for that appears to be if the apps iwctl, iwd and / or iwmon are anywhere on the system (and / or if iwd is running).

If you run

ps -ef | grep iwd

on a normal linux box or

ps w | grep iwd

on openwrt based routers it should give you a clear indication.

The linux based router I'm using here has iw and iwlist but they're for a separate package and no iwd daemon running.

I am still digging on this and will be until I'm happy.

update: iwd 2.13 is vulnerable and was released 2024/01/12 so unless you're bang up to date, if you're using iwd you're exposed.

update: even newer versions of OpenWRT don't appear to use IWD.

If these CVEs didn't expose a router that doesn't get updates, many others already have. OpenWRT might be more secure than OEM firmware.