Medium severity · published May 11, 2021
CVE-2020-26147
An issue was discovered in the Linux kernel 5.8.9
5.4
CVSS
7.6%
EPSS
No
On KEV
Description
An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used.
CVSS vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N
Attack vector
Adjacent
Complexity
High
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)7.6% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
4.4 before 4.4.271; 4.9 before 4.9.271; 4.14 before 4.14.235; 4.19 before 4.19.193; 5.4 before 5.4.124; 5.10 before 5.10.42; +1 more · source: NVD
CF
C-65 Firmware · Arista
All versions, or not specified · source: NVD
CF
C-75 Firmware · Arista
All versions, or not specified · source: NVD
DL
Debian Linux · Debian
9.0 · source: NVD
OF
O-90 Firmware · Arista
All versions, or not specified · source: NVD
SW
Scalance W1700 Ieee 802.11ac Firmware · Siemens
All versions, or not specified · source: NVD
SW
Scalance W700 Ieee 802.11n Firmware · Siemens
All versions, or not specified · source: NVD
WF
W-68 Firmware · Arista
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-26147
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-26147
Mailing List
http://www.openwall.com/lists/oss-security/2021/05/11/12
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-913875.pdf
Third Party Advisory
https://github.com/vanhoefm/fragattacks/blob/master/SUMMARY.md
Mailing List
https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html
Mailing List
https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html
Third Party Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wifi-faf-22epcEWu
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability