CVE-2020-26146: Input Validation

Reference Links

• https://www.cve.org/CVERecord?id=CVE-2020-26146 https://nvd.nist.gov/vuln/detail/CVE-2020-26146
• https://bugzilla.redhat.com/show_bug.cgi?id=1960502
• https://access.redhat.com/errata/RHSA-2021:4140
• https://access.redhat.com/errata/RHSA-2021:4356
• https://access.redhat.com/security/cve/cve-2020-26146
• https://lore.kernel.org/linux-wireless/20210511180259.159598-1-johannes@sipsolutions.net/
• https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1960503
• https://source.codeaurora.org/quic/la/platform/vendor/qcom-opensource/wlan/qcacld-3.0/commit/?id=f12e0232736851e661f1d8da7a5f23defabe93ef
• https://source.codeaurora.org/quic/qsdk/platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmn/commit/?id=ef22bcb7a1b08de1a048dae1919795183943d6e0
• https://source.android.com/docs/security/bulletin/2021-10-01 (Advisory)
• http://www.openwall.com/lists/oss-security/2021/05/11/12
• https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf
• https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu
• https://www.arista.com/en/support/advisories-notices/security-advisories/12602-security-advisory-63
• https://www.fragattacks.com

Parent vulnerabilities

(Appears in the following advisories)

• RHSA-2021:4140
• RHSA-2021:4356

Frequently Asked Questions

• What is the vulnerability ID for this issue?

  The vulnerability ID for this issue is CVE-2020-26146.

• What is the severity of CVE-2020-26146?

  The severity of CVE-2020-26146 is high with a severity value of 5.3.

• Which devices are affected by CVE-2020-26146?

  The Samsung Galaxy S3 i9305 with firmware version 4.4.4 is affected by CVE-2020-26146.

• How can an adversary exploit this vulnerability?

  An adversary can exploit CVE-2020-26146 by abusing the WiFi implementation to exfiltrate selected fragments.

• Where can I find more information about CVE-2020-26146?

  You can find more information about CVE-2020-26146 on the following references: [Reference 1](https://lore.kernel.org/linux-wireless/20210511180259.159598-1-johannes@sipsolutions.net/), [Reference 2](https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1960503), [Reference 3](https://access.redhat.com/errata/RHSA-2021:4140)