vulnerability
Ubuntu: (Multiple Advisories) (CVE-2020-24588): Linux kernel vulnerabilities
Severity | CVSS | Published | Added | Modified |
---|---|---|---|---|
3 | (AV:A/AC:M/Au:N/C:N/I:P/A:N) | May 11, 2021 | Jun 23, 2021 | Mar 22, 2023 |
Severity
3
CVSS
(AV:A/AC:M/Au:N/C:N/I:P/A:N)
Published
May 11, 2021
Added
Jun 23, 2021
Modified
Mar 22, 2023
Description
The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP) doesn't require that the A-MSDU flag in the plaintext QoS header field is authenticated. Against devices that support receiving non-SSP A-MSDU frames (which is mandatory as part of 802.11n), an adversary can abuse this to inject arbitrary network packets.
Solution(s)
ubuntu-upgrade-linux-image-5-10-0-1033-oemubuntu-upgrade-linux-image-5-11-0-1009-azureubuntu-upgrade-linux-image-5-11-0-1009-kvmubuntu-upgrade-linux-image-5-11-0-1010-oracleubuntu-upgrade-linux-image-5-11-0-1011-awsubuntu-upgrade-linux-image-5-11-0-1011-gcpubuntu-upgrade-linux-image-5-11-0-1012-raspiubuntu-upgrade-linux-image-5-11-0-1012-raspi-nolpaeubuntu-upgrade-linux-image-5-11-0-22-genericubuntu-upgrade-linux-image-5-11-0-22-generic-64kubuntu-upgrade-linux-image-5-11-0-22-generic-lpaeubuntu-upgrade-linux-image-5-11-0-22-lowlatencyubuntu-upgrade-linux-image-5-4-0-1018-gkeopubuntu-upgrade-linux-image-5-4-0-1038-raspiubuntu-upgrade-linux-image-5-4-0-1041-kvmubuntu-upgrade-linux-image-5-4-0-1046-gcpubuntu-upgrade-linux-image-5-4-0-1046-gkeubuntu-upgrade-linux-image-5-4-0-1048-oracleubuntu-upgrade-linux-image-5-4-0-1051-awsubuntu-upgrade-linux-image-5-4-0-1051-azureubuntu-upgrade-linux-image-5-4-0-77-genericubuntu-upgrade-linux-image-5-4-0-77-generic-lpaeubuntu-upgrade-linux-image-5-4-0-77-lowlatencyubuntu-upgrade-linux-image-5-8-0-1029-raspiubuntu-upgrade-linux-image-5-8-0-1029-raspi-nolpaeubuntu-upgrade-linux-image-5-8-0-1030-kvmubuntu-upgrade-linux-image-5-8-0-1033-oracleubuntu-upgrade-linux-image-5-8-0-1035-gcpubuntu-upgrade-linux-image-5-8-0-1036-azureubuntu-upgrade-linux-image-5-8-0-1038-awsubuntu-upgrade-linux-image-5-8-0-59-genericubuntu-upgrade-linux-image-5-8-0-59-generic-64kubuntu-upgrade-linux-image-5-8-0-59-generic-lpaeubuntu-upgrade-linux-image-5-8-0-59-lowlatencyubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-aws-lts-20-04ubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-azure-lts-20-04ubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-gcp-lts-20-04ubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-64kubuntu-upgrade-linux-image-generic-64k-hwe-20-04ubuntu-upgrade-linux-image-generic-hwe-18-04ubuntu-upgrade-linux-image-generic-hwe-20-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-hwe-18-04ubuntu-upgrade-linux-image-generic-lpae-hwe-20-04ubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-gke-5-4ubuntu-upgrade-linux-image-gkeopubuntu-upgrade-linux-image-gkeop-5-4ubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-hwe-18-04ubuntu-upgrade-linux-image-lowlatency-hwe-20-04ubuntu-upgrade-linux-image-oemubuntu-upgrade-linux-image-oem-20-04ubuntu-upgrade-linux-image-oem-20-04bubuntu-upgrade-linux-image-oem-osp1ubuntu-upgrade-linux-image-oracleubuntu-upgrade-linux-image-oracle-lts-20-04ubuntu-upgrade-linux-image-raspiubuntu-upgrade-linux-image-raspi-hwe-18-04ubuntu-upgrade-linux-image-raspi-nolpaeubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-snapdragon-hwe-18-04ubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-hwe-18-04ubuntu-upgrade-linux-image-virtual-hwe-20-04
References
- CVE-2020-24588
- https://attackerkb.com/topics/CVE-2020-24588
- NVD-CVE-2020-24588
- UBUNTU-USN-4983-1
- UBUNTU-USN-4997-1
- UBUNTU-USN-4997-2
- UBUNTU-USN-4999-1
- UBUNTU-USN-5000-1
- UBUNTU-USN-5000-2
- UBUNTU-USN-5001-1
- UBUNTU-USN-5002-1
- UBUNTU-USN-5003-1
- UBUNTU-USN-5016-1
- UBUNTU-USN-5018-1
- UBUNTU-USN-5082-1
- UBUNTU-USN-5299-1
- UBUNTU-USN-5339-1
- UBUNTU-USN-5343-1
- UBUNTU-USN-5361-1

NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.