CVE-2020-26145

kernel: accepting plaintext broadcast fragments as full frames

Published May 11, 2021 CVSS 3.1 · 6.5 Medium EPSS 3.5% KEV · Not listed
Description
An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent) broadcast fragments even when sent in plaintext and process them as full unfragmented frames. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2020-18772 An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept second (or subsequent) broadcast fragments even when sent in plaintext and process them as full unfragmented frames. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.
Ubuntu USN Ubuntu USN USN-4997-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-4997-2 Linux kernel (KVM) vulnerabilities
Ubuntu USN Ubuntu USN USN-4999-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-5000-1 Linux kernel vulnerabilities
Ubuntu USN Ubuntu USN USN-5000-2 Linux kernel (KVM) vulnerabilities
Ubuntu USN Ubuntu USN USN-5001-1 Linux kernel (OEM) vulnerabilities
Ubuntu USN Ubuntu USN USN-5361-1 Linux kernel vulnerabilities
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Apr 14, 2026, 8:49 AM
Reserved
Sep 29, 2020, 12:00 AM
Status
Modified
Published
May 11, 2021, 8:15 PM
Modified
Jun 17, 2026, 3:07 AM
Severity
Moderate
Public date
May 11, 2021, 12:00 AM