CVE-2020-24586

Public on 2021-05-11

Modified on 2022-01-10

Description

A flaw was found in the Linux kernels implementation of wifi fragmentation handling. An attacker with the ability to transmit within the wireless transmission range of an access point can abuse a flaw where previous contents of wifi fragments can be unintentionally transmitted to another device.

Severity

Medium

See what this means

CVSS v3 Base Score

4.3

See breakdown

Affected Packages

Platform	Package	Release Date	Advisory
Amazon Linux 2 - Kernel-5.10 Extra	kernel	2022-01-20 23:37	ALAS2KERNEL-5.10-2022-002
Amazon Linux 2 - Kernel-5.4 Extra	kernel	2022-01-12 19:26	ALAS2KERNEL-5.4-2022-004

CVSS Scores

	Score Type	Score	Vector
Amazon Linux	CVSSv3	4.3	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NVD	CVSSv3	3.5	CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
NVD	CVSSv2	2.9	AV:A/AC:M/Au:N/C:P/I:N/A:N

References

Red Hat: CVE-2020-24586 Mitre: CVE-2020-24586 FAQs regarding Amazon Linux ALAS/CVE Severity