CVE-2020-26147 - CVE House
Back to Database
Status published Medium CVE-2020-26147

An issue was discovered in the Linux kernel 5.8.9. The...

Vulnerability Description

An issue was discovered in the Linux kernel 5.8.9. The WEP, WPA, WPA2, and WPA3 implementations reassemble fragments even though some of them were sent in plaintext. This vulnerability can be abused to inject packets and/or exfiltrate selected fragments when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-26147

Credits & Attribution

No credits recorded in the NVD database.

References

More from linux

View All →
CVE-2022-48619
An issue was discovered in drivers/input/input.c in the Linux kernel...
Unknown 0
CVE-2022-48502
An issue was discovered in the Linux kernel before 6.2....
High 7.1
CVE-2022-48425
In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid...
Unknown 0
CVE-2022-48424
In the Linux kernel before 6.1.3, fs/ntfs3/inode.c does not validate...
Unknown 0
CVE-2022-48423
In the Linux kernel before 6.1.3, fs/ntfs3/record.c does not validate...
Unknown 0

Affected Vendor

Affected Software

linux kernel, debian linux, c-75 firmware, o-90 firmware, c-65 firmware, w-68 firmware, scalance w700 ieee 802.11n firmware, scalance w1700 ieee 802.11ac firmware
Vulnerable Versions:
4.4, 4.9, 4.14, 4.19, 5.4, 5.10, 5.12, 9.0

Timeline

Official Publish: May 11th, 2021
Last Modified: April 14th, 2026
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.