Skip to content
OpenAdvisories
Unscored CVE-2020-24586 EUVD-2020-17303GHSA-85mg-8m94-9jrr

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that rec…

Published May 11, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that received fragments be cleared from memory after (re)connecting to a network. Under the right circumstances, when another device sends fragmented frames encrypted using WEP, CCMP, or GCMP, this can be abused to inject arbitrary network packets and/or exfiltrate user data.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 firmware-nonfree 20210818-1 —
Debian 14 linux 5.10.46-1 —
Debian 13 firmware-nonfree 20210818-1 —
Debian 13 linux 5.10.46-1 —
Debian 12 firmware-nonfree 20210818-1 —
Debian 12 linux 5.10.46-1 —
Debian 10 firmware-nonfree 20190114+really20220913-0+deb10u1 DLA-3380-1
Debian 9 linux 4.9.272-1 DLA-2689-1
Debian 9 linux-4.19 4.19.194-1~deb9u1 DLA-2690-1
ReleasePackageFixed inAdvisory
Ubuntu 24.04 LTS linux-raspi-realtime No fix yet —
Ubuntu 22.04 LTS linux-realtime +1 No fix yet —
Ubuntu 20.04 LTS linux 5.4.0-77.86 USN-5000-1
Ubuntu 20.04 LTS linux-aws +1 5.4.0-1051.53 USN-5000-1
Ubuntu 20.04 LTS linux-aws-5.8 5.8.0-1038.40~20.04.1 USN-4999-1
Ubuntu 20.04 LTS linux-azure-5.8 5.8.0-1036.38~20.04.1 USN-4999-1
Ubuntu 20.04 LTS linux-bluefield 5.4.0-1013.16 —
Ubuntu 20.04 LTS linux-gcp 5.4.0-1046.49 USN-5000-1
Ubuntu 20.04 LTS linux-gcp-5.8 5.8.0-1035.37~20.04.1 USN-4999-1
Ubuntu 20.04 LTS linux-gke 5.4.0-1046.48 USN-5000-1
Ubuntu 20.04 LTS linux-gkeop 5.4.0-1018.19 USN-5000-1
Ubuntu 20.04 LTS linux-hwe-5.8 5.8.0-59.66~20.04.1 USN-4999-1
Ubuntu 20.04 LTS linux-kvm 5.4.0-1041.42 USN-5000-2
Ubuntu 20.04 LTS linux-oem-5.10 5.10.0-1032.33 USN-5001-1
Ubuntu 20.04 LTS linux-oracle 5.4.0-1048.52 USN-5000-1
Ubuntu 20.04 LTS linux-oracle-5.8 5.8.0-1033.34~20.04.1 USN-4999-1
Ubuntu 20.04 LTS linux-raspi 5.4.0-1038.41 USN-5000-1
Ubuntu 20.04 LTS linux-riscv +2 No fix yet —
Ubuntu 20.04 LTS linux-riscv-5.8 5.8.0-29.31~20.04.1 —
Ubuntu 18.04 LTS linux 4.15.0-151.157 USN-5018-1
Ubuntu 18.04 LTS linux-aws 4.15.0-1109.116 USN-5018-1
Ubuntu 18.04 LTS linux-aws-5.4 +1 5.4.0-1051.53~18.04.1 USN-5000-1
Ubuntu 18.04 LTS linux-azure-4.15 4.15.0-1121.134 USN-5018-1
Ubuntu 18.04 LTS linux-dell300x 4.15.0-1027.32 —
Ubuntu 18.04 LTS linux-gcp +13 No fix yet —
Ubuntu 18.04 LTS linux-gcp-4.15 4.15.0-1106.120 USN-5018-1
Ubuntu 18.04 LTS linux-gcp-5.4 5.4.0-1046.49~18.04.1 USN-5000-1
Ubuntu 18.04 LTS linux-gke-5.4 5.4.0-1046.48~18.04.1 USN-5000-1
Ubuntu 18.04 LTS linux-gkeop-5.4 5.4.0-1018.19~18.04.1 USN-5000-1
Ubuntu 18.04 LTS linux-hwe-5.4 5.4.0-77.86~18.04.1 USN-5000-1
Ubuntu 18.04 LTS linux-kvm 4.15.0-1097.99 USN-5018-1
Ubuntu 18.04 LTS linux-oracle 4.15.0-1078.86 USN-5018-1
Ubuntu 18.04 LTS linux-oracle-5.4 5.4.0-1048.52~18.04.1 USN-5000-1
Ubuntu 18.04 LTS linux-raspi-5.4 5.4.0-1038.41~18.04.1 USN-5000-1
Ubuntu 18.04 LTS linux-raspi2 4.15.0-1092.98 USN-5018-1
Ubuntu 18.04 LTS linux-snapdragon 4.15.0-1109.118 USN-5018-1
Ubuntu 16.04 LTS linux-hwe-edge No fix yet —
Show 9 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro FIPS 20.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS 18.04 LTS linux-fips +3 No fix yet —
Ubuntu Pro FIPS 16.04 LTS linux-fips No fix yet —
Ubuntu Pro FIPS-updates 20.04 LTS linux-aws-fips 5.4.0-1069.73+fips2 —
Ubuntu Pro FIPS-updates 20.04 LTS linux-azure-fips 5.4.0-1073.76+fips1 —
Ubuntu Pro FIPS-updates 20.04 LTS linux-fips 5.4.0-1028.32 —
Ubuntu Pro FIPS-updates 20.04 LTS linux-gcp-fips 5.4.0-1067.71~20.04.1 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-aws-fips 4.15.0-2051.53 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-azure-fips 4.15.0-2033.37 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-fips 4.15.0-1066.75 —
Ubuntu Pro FIPS-updates 18.04 LTS linux-gcp-fips 4.15.0-2016.18 —
Ubuntu Pro FIPS-updates 16.04 LTS linux-fips No fix yet —
Ubuntu Pro 20.04 LTS linux-azure-fde-5.15 5.15.0-1114.123~20.04.1 —
Ubuntu Pro 16.04 LTS linux +2 No fix yet —
Ubuntu Pro 16.04 LTS linux-aws-hwe 4.15.0-1109.116~16.04.1 USN-5018-1
Ubuntu Pro 16.04 LTS linux-azure 4.15.0-1121.134~16.04.1 USN-5018-1
Ubuntu Pro 16.04 LTS linux-gcp 4.15.0-1106.120~16.04.1 USN-5018-1
Ubuntu Pro 16.04 LTS linux-hwe 4.15.0-151.157~16.04.1 USN-5018-1
Ubuntu Pro 16.04 LTS linux-oracle 4.15.0-1078.86~16.04.1 USN-5018-1
Ubuntu Pro 14.04 LTS linux +2 No fix yet —
Ubuntu Pro 14.04 LTS linux-azure 4.15.0-1121.134~14.04.1 USN-5018-1
ReleasePackageFixed inAdvisory
RHEL 8 kernel-rt +12 4.18.0-348.rt7.130.el8 RHSA-2021:4140
RHEL 8 perf +26 4.18.0-348.el8 RHSA-2021:4356

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 8 kernel-tools-libs-devel 4.18.0-348.el8 ALSA-2021:4356
ReleasePackageFixed inAdvisory
SLES 15 SP3 kernel-64kb +5 5.3.18-59.5.2 SUSE-SU-2021:1977-1
SLES 15 SP3 kernel-azure +2 5.3.18-38.3.1 SUSE-SU-2021:1975-1
SLES 15 SP3 kernel-default-base 5.3.18-59.5.2.18.2.2 SUSE-SU-2021:1977-1
SLES 15 SP3 kernel-syms +1 5.3.18-59.5.1 SUSE-SU-2021:1977-1
SLES 15 SP2 kernel-azure +1 5.3.18-18.50.2 SUSE-SU-2021:1888-1
SLES 15 SP2 kernel-default-base 5.3.18-24.67.3.9.30.2 SUSE-SU-2021:1890-1
SLES 15 SP2 kernel-docs +1 5.3.18-24.67.3 SUSE-SU-2021:1890-1
SLES 15 SP2 kernel-preempt 5.3.18-24.67.4 SUSE-SU-2021:1890-1
SLES 15 SP2 kernel-source +1 5.3.18-24.67.2 SUSE-SU-2021:1890-1
SLES 15 SP2 kernel-syms 5.3.18-24.67.1 SUSE-SU-2021:1890-1
SLES 15 SP2 kernel-syms-azure 5.3.18-18.50.1 SUSE-SU-2021:1888-1
SLES 15 SP1 kernel-docs +5 4.12.14-197.92.1 SUSE-SU-2021:1912-1
SLES 15 kernel-docs +6 4.12.14-150.75.1 SUSE-SU-2021:2421-1
SLES 12 SP5 kernel-azure +2 4.12.14-16.59.1 SUSE-SU-2021:1887-1
SLES 12 SP5 kernel-docs 4.12.14-122.74.2 SUSE-SU-2021:1913-1
SLES 12 SP5 kernel-syms +3 4.12.14-122.74.1 SUSE-SU-2021:1913-1
Show 30 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP4 kernel-syms +2 4.12.14-95.77.1 SUSE-SU-2021:1891-1
SLES 12 SP3 kernel-syms +2 4.4.180-94.147.1 SUSE-SU-2021:2451-1
SLES 12 SP3 kgraft-patch-SLE12-SP3_Update_40 1-4.3.1 SUSE-SU-2021:2451-1
SLES 12 SP2 kernel-syms +2 4.4.121-92.158.1 SUSE-SU-2021:2406-1
SLES 11 SP4 kernel-ec2 +8 3.0.101-108.129.1 SUSE-SU-2021:14764-1
SLES for SAP 15 SP1 kernel-docs +4 4.12.14-197.92.1 SUSE-SU-2021:1912-1
SLES for SAP 15 kernel-docs +5 4.12.14-150.75.1 SUSE-SU-2021:2421-1
SLES for SAP 12 SP5 kernel-azure +2 4.12.14-16.59.1 SUSE-SU-2021:1887-1
SLES for SAP 12 SP5 kernel-syms +2 4.12.14-122.74.1 SUSE-SU-2021:1913-1
SLES for SAP 12 SP4 kernel-syms +2 4.12.14-95.77.1 SUSE-SU-2021:1891-1
SLES for SAP 12 SP3 kernel-syms +2 4.4.180-94.147.1 SUSE-SU-2021:2451-1
SLES for SAP 12 SP3 kgraft-patch-SLE12-SP3_Update_40 1-4.3.1 SUSE-SU-2021:2451-1
SLE Real Time 12 SP5 kernel-rt +3 4.12.14-10.46.1 SUSE-SU-2021:1899-1
SLE Micro 5.0 kernel-default 5.3.18-24.67.3 SUSE-SU-2021:1890-1
SLE Micro 5.0 kernel-default-base 5.3.18-24.67.3.9.30.2 SUSE-SU-2021:1890-1
SLE Micro 5.0 kernel-rt 5.3.18-8.13.1 SUSE-SU-2021:2208-1
SLE Live Patching 15 SP3 kernel-default 5.3.18-59.5.2 SUSE-SU-2021:1977-1
SLE Live Patching 15 SP3 kernel-livepatch-SLE15-SP3_Update_1 1-7.5.1 SUSE-SU-2021:1977-1
SLE Live Patching 15 SP2 kernel-default 5.3.18-24.67.3 SUSE-SU-2021:1890-1
SLE Live Patching 15 SP2 kernel-livepatch-SLE15-SP2_Update_14 1-5.3.2 SUSE-SU-2021:1890-1
SLE Live Patching 15 SP1 kernel-default 4.12.14-197.92.1 SUSE-SU-2021:1912-1
SLE Live Patching 15 SP1 kernel-livepatch-SLE15-SP1_Update_25 1-3.3.1 SUSE-SU-2021:1912-1
SLE Live Patching 15 kernel-default 4.12.14-150.75.1 SUSE-SU-2021:2421-1
SLE Live Patching 15 kernel-livepatch-SLE15_Update_25 1-1.3.1 SUSE-SU-2021:2421-1
SLE Live Patching 12 SP5 kernel-default 4.12.14-122.74.1 SUSE-SU-2021:1913-1
SLE Live Patching 12 SP5 kgraft-patch-SLE12-SP5_Update_19 1-8.3.1 SUSE-SU-2021:1913-1
SLE Live Patching 12 SP4 kernel-default 4.12.14-95.77.1 SUSE-SU-2021:1891-1
SLE Live Patching 12 SP4 kgraft-patch-SLE12-SP4_Update_21 1-6.3.1 SUSE-SU-2021:1891-1
SLE HPC 15 SP1 kernel-docs +4 4.12.14-197.92.1 SUSE-SU-2021:1912-1
SLE HPC 15 kernel-docs +5 4.12.14-150.75.1 SUSE-SU-2021:2421-1
SUSE Real Time Module 15 SP3 kernel-rt +3 5.3.18-8.13.1 SUSE-SU-2021:2208-1
SUSE Real Time Module 15 SP2 kernel-rt +3 5.3.18-39.1 SUSE-SU-2021:1889-1
SUSE OpenStack Cloud Crowbar 9 kernel-syms +2 4.12.14-95.77.1 SUSE-SU-2021:1891-1
SUSE OpenStack Cloud Crowbar 8 kernel-syms +2 4.4.180-94.147.1 SUSE-SU-2021:2451-1
SUSE OpenStack Cloud Crowbar 8 kgraft-patch-SLE12-SP3_Update_40 1-4.3.1 SUSE-SU-2021:2451-1
SUSE OpenStack Cloud 9 kernel-syms +2 4.12.14-95.77.1 SUSE-SU-2021:1891-1
SUSE OpenStack Cloud 8 kernel-syms +2 4.4.180-94.147.1 SUSE-SU-2021:2451-1
SUSE OpenStack Cloud 8 kgraft-patch-SLE12-SP3_Update_40 1-4.3.1 SUSE-SU-2021:2451-1
SUSE Manager Server 4.0 kernel-docs +5 4.12.14-197.92.1 SUSE-SU-2021:1912-1
SUSE Manager Retail Branch Server 4.0 kernel-docs +4 4.12.14-197.92.1 SUSE-SU-2021:1912-1
SUSE Manager Proxy 4.0 kernel-docs +4 4.12.14-197.92.1 SUSE-SU-2021:1912-1
SUSE HPE Helion OpenStack 8 kernel-syms +2 4.4.180-94.147.1 SUSE-SU-2021:2451-1
SUSE HPE Helion OpenStack 8 kgraft-patch-SLE12-SP3_Update_40 1-4.3.1 SUSE-SU-2021:2451-1
SUSE Enterprise Storage 6 kernel-docs +4 4.12.14-197.92.1 SUSE-SU-2021:1912-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed kernel-source 5.14.6-1.4 openSUSE-SU-2024:13704-1, openSUSE-SU-2024:10728-1
openSUSE Leap 15.3 kernel-64kb +7 5.3.18-59.5.2 openSUSE-SU-2021:1977-1
openSUSE Leap 15.3 kernel-azure +2 5.3.18-38.3.1 openSUSE-SU-2021:1975-1
openSUSE Leap 15.3 kernel-default-base 5.3.18-59.5.2.18.2.2 openSUSE-SU-2021:1977-1
openSUSE Leap 15.3 kernel-syms +2 5.3.18-59.5.1 openSUSE-SU-2021:1977-1
openSUSE Leap 15.2 kernel-default-base 5.3.18-lp152.78.1.lp152.8.34.1 openSUSE-SU-2021:0843-1
openSUSE Leap 15.2 kernel-docs +8 5.3.18-lp152.78.1 openSUSE-SU-2021:0843-1
openSUSE Leap 15.2 kernel-rt +3 5.3.18-lp152.3.14.1 openSUSE-SU-2021:0947-1

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 perf +19 4.18.0-348.el8 ELSA-2021-4356
Oracle Linux 7 kernel-uek +5 4.1.12-124.54.6.1.el7uek ELSA-2021-9459, ELSA-2021-9452, ELSA-2021-9404
Oracle Linux 7 kernel-uek-container 4.14.35-2047.507.7.4.el7 ELSA-2021-9453, ELSA-2021-9406
Oracle Linux 7 kernel-uek-container-debug 5.4.17-2102.204.4.2.el8 ELSA-2021-9406
Oracle Linux 7 perf +5 4.14.35-2047.507.7.4.el7uek ELSA-2021-9452, ELSA-2021-9404

Advisories 41

References