In the Linux kernel, the following vulnerability has been resolved:
wifi: prevent A-MSDU attacks in mesh networks
This patch is a mitigation to prevent the A-MSDU spoofing vulnerability for mesh networks. The initial update to the IEEE 802.11 standard, in response to the FragAttacks, missed this case (CVE-2025-27558). It can be considered a variant of CVE-2020-24588 but for mesh networks.
This patch tries to detect if a standard MSDU was turned into an A-MSDU by an adversary. This is done by parsing a received A-MSDU as a standard MSDU, calculating the length of the Mesh Control header, and seeing if the 6 bytes after this header equal the start of an rfc1042 header. If equal, this is a strong indication of an ongoing attack attempt.
This defense was tested with mac80211_hwsim against a mesh network that uses an empty Mesh Address Extension field, i.e., when four addresses are used, and when using a 12-byte Mesh Address Extension field, i.e., when six addresses are used. Functionality of normal MSDUs and A-MSDUs was also tested, and confirmed working, when using both an empty and 12-byte Mesh Address Extension field.
It was also tested with mac80211_hwsim that A-MSDU attacks in non-mesh networks keep being detected and prevented.
Note that the vulnerability being patched, and the defense being implemented, was also discussed in the following paper and in the following IEEE 802.11 presentation:
https://papers.mathyvanhoef.com/wisec2025.pdf https://mentor.ieee.org/802.11/dcn/25/11-25-0949-00-000m-a-msdu-mesh-spoof-protection.docx
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Aug 18, 2025 | Aug 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Aug 16, 2025 |
| Suse | — | Upgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade kernel-source-rtUpgrade kernel-docsUpgrade kernel-devel-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade dlm-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade dtb-rockchipUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dtb-apmUpgrade kernel-sourceUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade kernel-default-manUpgrade dtb-appleUpgrade reiserfs-kmp-rtUpgrade kernel-rtUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade dtb-marvellUpgrade kernel-rt-vdsoUpgrade dtb-broadcomUpgrade kernel-zfcpdumpUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-develUpgrade kernel-docs-htmlUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmallUpgrade dtb-socionextUpgrade kernel-rt_debugUpgrade kselftests-kmp-rtUpgrade dtb-qcomUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade dtb-caviumUpgrade dtb-amdUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-defaultUpgrade kernel-azureUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-vdsoUpgrade kselftests-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade kernel-default-livepatchUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade kernel-debugUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade dtb-sprdUpgrade kernel-debug-vdsoUpgrade dtb-nvidiaUpgrade kernel-rt-extraUpgrade dtb-exynosUpgrade kernel-64kb-extraUpgrade dtb-xilinxUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-azure-optionalUpgrade dtb-hisiliconUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade dtb-renesasUpgrade dtb-lgUpgrade kernel-rt-develUpgrade ocfs2-kmp-64kbUpgrade kernel-default-baseUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-rtUpgrade kernel-debug-develUpgrade kernel-obs-buildUpgrade dtb-mediatek | Dec 5, 2025 | Sep 12, 2025 |
| Ubuntu | — | Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gcp-6.8Upgrade linux-image-6.14.0-1017-oracleUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-azure-6.8Upgrade linux-image-kvmUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-6.14Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-fips-6.8Upgrade linux-image-nvidiaUpgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-xilinxUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-6.14Upgrade linux-image-aws-64kUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.14.0-1016-oemUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.14.0-1017-aws-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-oracleUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtual-6.14Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-virtual-6.8Upgrade linux-image-generic-64kUpgrade linux-image-fipsUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1018-raspiUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.14.0-1020-gcp-64kUpgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1017-oracle-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-lowlatency-6.8Upgrade linux-image-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-6.14Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-6.14.0-36-genericUpgrade linux-image-xilinx-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-1016-realtimeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-6.14.0-1017-azureUpgrade linux-image-6.14.0-1017-awsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-realtime-6.14Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.14.0-36-generic-64kUpgrade linux-image-aws-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-6.14Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-genericUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.14.0-1020-gcpUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-22.04cUpgrade linux-image-azure-6.14Upgrade linux-image-raspi-6.8 | Nov 25, 2025 | Nov 21, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Aug 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub