CVE-2020-26145: Input Validation
A flaw was found in ath10khttrxprocrxfragindhl in drivers/net/wireless/ath/ath10k/httrx.c in the Linux kernel WiFi implementations, where it accepts a second (or subsequent) broadcast fragments even when sent in plaintext and then process them as full unfragmented frames. The highest threat from this vulnerability is to integrity.
Other sources
An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent) broadcast fragments even when sent in plaintext and process them as full unfragmented frames. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.
Affected Software
Remediation
Information
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2020-26145?
CVE-2020-26145 has a high severity rating due to its potential to allow attackers to exploit the wireless stack in affected systems.
How do I fix CVE-2020-26145?
To fix CVE-2020-26145, update your Linux kernel to the recommended versions such as 0:4.18.0-348.el8 or later versions provided by your distribution.
Which software is affected by CVE-2020-26145?
CVE-2020-26145 affects multiple systems including Red Hat kernels, Google Android, and specific Siemens firmware.
What types of attacks are possible due to CVE-2020-26145?
Exploitation of CVE-2020-26145 could lead to denial of service or unauthorized access through manipulated wireless frames.
Are there any mitigations for CVE-2020-26145?
Employing network segmentation and monitoring can help mitigate the risks associated with CVE-2020-26145 until systems can be updated.