CVE-2020-26147
Medium
Description
An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used.
SeverityMedium
CVSS5.4
Exploit probability—
Product
Linux Kernel
PublishedMay 11, 2021
First seenMay 11, 2021
How to fix
Update
- linux linux_kernel4.4.271, 4.9.271, 4.14.235, 4.19.193, 5.4.124, 5.10.42, 5.12.9 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 4.4 ≤ v < 4.4.271, 4.9 ≤ v < 4.9.271, 4.14 ≤ v < 4.14.235, 4.19 ≤ v < 4.19.193, 5.4 ≤ v < 5.4.124, 5.10 ≤ v < 5.10.42, 5.12 ≤ v < 5.12.9 | 4.4.271, 4.9.271, 4.14.235, 4.19.193, 5.4.124, 5.10.42, 5.12.9 |
| debian debian_linux | 9.0 | — |
| arista c-75_firmware | No range specified | — |
| arista o-90_firmware | No range specified | — |
| arista c-65_firmware | No range specified | — |
| arista w-68_firmware | No range specified | — |
| siemens scalance_w700_ieee_802.11n_firmware | No range specified | — |
| siemens scalance_w1700_ieee_802.11ac_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.