CVE-2020-26144: Input Validation
A flaw was found in the Linux kernel, where the WiFi implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 (ex., LLC/SNAP) header for EAPOL. The highest threat from this vulnerability is to integrity.
Other sources
A vulnerability was found in Linux Kernel, where the wifi implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 (i.e., LLC/SNAP) header for EAPOL.
upstream patch: https://lore.kernel.org/linux-wireless/20210511180259.159598-1-johannes@sipsolutions.net/
— Red Hat
An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 (i.e., LLC/SNAP) header for EAPOL. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.
Affected Software
Remediation
Information
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2020-26144?
CVE-2020-26144 is a vulnerability in the Linux kernel that allows an adversary to inject arbitrary network packets.
What is the severity of CVE-2020-26144?
The severity of CVE-2020-26144 is medium with a CVSS score of 6.5.
Which software versions are affected by CVE-2020-26144?
CVE-2020-26144 affects Samsung Galaxy S3 i9305 4.4.4 devices and certain versions of the Red Hat kernel and kernel-rt packages.
How can an adversary exploit CVE-2020-26144?
An adversary can exploit CVE-2020-26144 by sending plaintext A-MSDU frames with a valid RFC1042 header for EAPOL.
Where can I find more information about CVE-2020-26144?
You can find more information about CVE-2020-26144 in the provided references.