vulnerability

Oracle Linux: CVE-2020-26142: ELSA-2021-9459: Unbreakable Enterprise kernel security update (IMPORTANT)

Severity
3
CVSS
(AV:N/AC:H/Au:N/C:N/I:P/A:N)
Published
May 11, 2021
Added
Sep 23, 2021
Modified
Dec 3, 2025

Description

An issue was discovered in the kernel in OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented frames as full frames. An adversary can abuse this to inject arbitrary network packets, independent of the network configuration.
A flaw was found in the Linux kernel, where the WiFi implementations treat fragmented frames as full frames. This flaw allows an attacker to inject arbitrary network packets independent of the network configuration. The highest threat from this vulnerability is to integrity.

Solution

oracle-linux-upgrade-kernel-uek
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.