Input validation error in Intel products - CVE-2020-24586

Vulnerability identifier: #VU53154

CSH Severity: Low

CVSS v4: 6 [CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-24586

CWE-ID: CWE-20

Exploitation vector: Adjecent network

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists in the 802.11 standard due to the affected device does not clear its cache/memory to remove fragments of an incomplete MSDU/MMPDU from previous session after reconnection/reassociation. A remote attacker on the local network can perform a fragment cache attack and perform a denial of service (DoS) attack.

Intel Dual Band Wireless-AC 3168
Intel Wireless 7265 (Rev D) Family
Intel Dual Band Wireless-AC 3165
Intel Dual Band Wireless-AC 8265
Intel Dual Band Wireless-AC 8260
Intel Wi-Fi 6E AX210
Intel Wi-Fi 6 AX201
Intel Wi-Fi 6 AX200
Intel Wireless-AC 9560
Intel Wireless-AC 9462
Intel Wireless-AC 9461
Intel Wireless-AC 9260
Meraki MR42
Meraki MR36
Meraki MR33
Meraki MR30H
Meraki MR20
Meraki GR60
Meraki GR10
Cisco Meraki Z3C
Cisco Meraki MX68CW
Cisco Meraki MX68W
Cisco Meraki MX67CW
Cisco Meraki MX67W
Meraki Z3
Meraki MR43
WX3310-B0
WRE6605
WRE6602
Meraki MR84
Meraki MR86
NWA1123AC PRO
Meraki MR76
Meraki MR70
Meraki MR56
Meraki MR55
Meraki MR53E
Meraki MR53
Meraki MR52
Meraki MR46E
Meraki MR46
Meraki MR45
Meraki MR44
Meraki MR43E
WAC6553D-E
LTE3202-M437
LTE3202-M430
LTE2566
PMG5705-T10A
P-660HN-51
EMG3425-Q10A
USG60W
USG40W
USG20W-VPN
USG FLEX 100W
ATP100W
WAX650S
WAX610D
WAX510D
WRE2206
WAC6552D-S
WAC6503D-S
WAC6502D-S
WAC6502D-E
WAC6103D-I
WAC500H
WAC500
NWA5123-AC
NWA210AX
NWA1302-AC
NWA1123ACv3
NWA1123-ACv2
WRE6505 v2
NWA110AX
LTE3301-PLUS
WAP6806
WAP6804
WAP3205 v3
NWD6605
NWD6602
NWD6505
NBG7815 (Armor G5)
NBG6818 (Armor G1)
NBG6817 (Armor Z2)
NBG6615
NBG6604
NBG6515
NBG-418N v2
WSR30 (Multy U)
WSQ50 (Multy X)
LTE3301-M209
LTE3302-M432
LTE3316-M604(v1)
LTE3316-M604(v2)
LTE5366
LTE5388-M804
WAH7601
WAH7608
AX7501-B0
WSQ20 (Multy Mini)
WSQ60 (Multy Plus)
EMG1702-T10A
LTE7490-M904
LTE7480-M804
NR5101
NR7101
NR2101
LTE5388-S905
LTE7485-S905
LTE7240-M403
LTE7461-M602
LTE7480-S905
VMG9827-B50A
EMG8726-B50A
DX4510-B0
EX5501-B0
PMG5617GA
PMG5622GA
PMG5317-T20B
EMG3524-T10A
WAC6303D-S
NWA5123-AC HD
NWA1123-AC HD
WAC5302D-Sv2
WAC5302D-S
Cisco IP Phone 6861
Cisco IP Conference Phone 8832
Cisco Wireless IP Phone 8821
Webex Wireless Phone 840
Webex Wireless Phone 860
Cisco IP Phone 8861
Cisco IP Phone 8865
Cisco Catalyst 9130 Series Access Points
Cisco Catalyst 9117 Series Access Points
GT25-WLAN
Cisco Aironet 1560 Series Access Points
Cisco Aironet 2800 Series Access Points
Cisco Aironet 3800 Series Access Points
Cisco 4800 Aironet Access Points
Cisco Catalyst IW 6300
ESR6300 Embedded Series Routers
Cisco Aironet 1850 Series Access Points
Cisco Catalyst 9105 Series Access Points
Cisco Catalyst 9115 Series Wi-Fi 6 Access Points
Cisco Catalyst 9120 Series Access Points
Integrated AP on 1100 Integrated Services Routers
Meraki MR74
Cisco Webex Room Series
Cisco Webex Desk Series
Cisco Webex Board
TropOS
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE MicroOS
SUSE Enterprise Storage
Anolis OS
Red Hat CodeReady Linux Builder for ARM 64
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Red Hat CodeReady Linux Builder for x86_64
Red Hat Enterprise Linux for Real Time
Red Hat CodeReady Linux Builder for Power, little endian
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Live Patching
SUSE Linux Enterprise High Availability
SUSE Linux Enterprise Server
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise Workstation Extension
SUSE Linux Enterprise Real Time Extension
Slackware Linux
Ubuntu
SUSE Linux Enterprise Module for Live Patching
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Public Cloud
SUSE Linux Enterprise Module for Realtime
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Module for Development Tools
SUSE Linux Enterprise Module for Legacy Software
LTE4506-M606
WAH7706
VMG4927-B50A
VMG3927-B50B
EMG6726-B10A
EX5510-B0
EX3510-B0
XMG3927-B50A
XMG8825-B50A
VMG3927-B50A_B60A
VMG8825-B50A_B60A
VMG8825-Bx0B
EMG3525-T50B
EMG5523-T50B
VMG1312-T20B
VMG8623-T50B
VMG3625-T50B
EMG5723-T50K
VMG8825-T50K
VMG3927-T50K
linux-image-aws-hwe (Ubuntu package)
kernel-livepatch-4_12_14-197_92-default
kernel-livepatch-SLE15-SP2_Update_14-debugsource
kernel-livepatch-5_3_18-24_67-default-debuginfo
kernel-livepatch-5_3_18-24_67-default
kgraft-patch-4_12_14-95_77-default
kernel-livepatch-5_3_18-59_5-default
kernel-livepatch-5_3_18-59_5-default-debuginfo
kernel-livepatch-SLE15-SP3_Update_1-debugsource
kgraft-patch-4_12_14-122_74-default
linux-4.4.276/kernel-modules
linux-4.4.276/kernel-huge
linux-4.4.276/kernel-generic
linux-4.4.276/kernel-headers
kernel-source-rt
kernel-rt-base
kernel-devel-rt
dlm-kmp-rt-debuginfo
cluster-md-kmp-rt
cluster-md-kmp-rt-debuginfo
dlm-kmp-rt
gfs2-kmp-rt-debuginfo
ocfs2-kmp-rt-debuginfo
ocfs2-kmp-rt
kernel-syms-rt
kernel-rt_debug-devel-debuginfo
kernel-rt_debug-devel
kernel-rt_debug-debugsource
kernel-rt_debug-debuginfo
kernel-rt_debug
kernel-rt-devel
kernel-rt-debugsource
kernel-rt-debuginfo
kernel-rt-base-debuginfo
gfs2-kmp-rt
kernel-rt
kernel-rt-devel-debuginfo
kernel-azure-debuginfo
kernel-source-azure
kernel-devel-azure
kernel-syms-azure
kernel-azure-devel
kernel-azure-debugsource
kernel-azure-base-debuginfo
kernel-azure-base
kernel-azure
cluster-md-kmp-default
kernel-default-kgraft-devel
kernel-syms
kernel-default-kgraft
kernel-default-man
kernel-source
kernel-macros
kernel-devel
kernel-default-base-debuginfo
kernel-default-devel
kernel-default-debugsource
kernel-default-debuginfo
kernel-default-devel-debuginfo
cluster-md-kmp-default-debuginfo
kernel-default-base
kernel-default
ocfs2-kmp-default-debuginfo
ocfs2-kmp-default
gfs2-kmp-default-debuginfo
gfs2-kmp-default
dlm-kmp-default-debuginfo
dlm-kmp-default
kernel-obs-build-debugsource
kernel-obs-build
kernel-default-extra-debuginfo
kernel-default-extra
kernel-docs
reiserfs-kmp-default-debuginfo
reiserfs-kmp-default
kernel-default-livepatch-devel
kernel-default-livepatch
kernel-zfcpdump-debugsource
kernel-zfcpdump-debuginfo
linux-image-virtual (Ubuntu package)
linux-image-lowlatency (Ubuntu package)
linux-image-generic-lpae (Ubuntu package)
linux-image-generic (Ubuntu package)
linux-image-4.15.0-151-lowlatency (Ubuntu package)
linux-image-4.15.0-151-generic-lpae (Ubuntu package)
linux-image-4.15.0-151-generic (Ubuntu package)
linux-image-virtual-hwe-16.04 (Ubuntu package)
linux-image-generic-hwe-16.04 (Ubuntu package)
linux-image-lowlatency-hwe-16.04 (Ubuntu package)
linux-image-4.15.0-1078-oracle (Ubuntu package)
linux-image-oracle-lts-18.04 (Ubuntu package)
linux-image-raspi2 (Ubuntu package)
linux-image-4.15.0-1092-raspi2 (Ubuntu package)
linux-image-kvm (Ubuntu package)
linux-image-4.15.0-1097-kvm (Ubuntu package)
linux-image-4.15.0-1106-gcp (Ubuntu package)
linux-image-gcp-lts-18.04 (Ubuntu package)
linux-image-aws-lts-18.04 (Ubuntu package)
linux-image-snapdragon (Ubuntu package)
linux-image-4.15.0-1109-aws (Ubuntu package)
linux-image-4.15.0-1109-snapdragon (Ubuntu package)
linux-image-azure-lts-18.04 (Ubuntu package)
linux-image-4.15.0-1121-azure (Ubuntu package)
kernel (Red Hat package)
kernel-rt (Red Hat package)
kernel-headers
python3-perf
perf
kernel-tools-libs-devel
kernel-tools-libs
kernel-tools
kernel-modules-internal
kernel-modules-extra
kernel-modules
bpftool
kernel-debug-modules-extra
kernel-debug-modules
kernel-debug-devel
kernel-debug-core
kernel-debug
kernel-core
kernel
kernel-azure-devel-debuginfo
kernel-preempt
kernel-preempt-devel-debuginfo
kernel-preempt-devel
kernel-preempt-debugsource
kernel-preempt-debuginfo
kernel-preempt-extra-debuginfo
kernel-preempt-extra
kernel-zfcpdump
kernel-64kb-devel-debuginfo
kernel-64kb-devel
kernel-64kb-debugsource
kernel-64kb-debuginfo
kernel-64kb
linux-image-oem (Ubuntu package)
linux-image-oem-osp1 (Ubuntu package)
linux-image-5.4.0-77-generic-lpae (Ubuntu package)
linux-image-5.4.0-77-generic (Ubuntu package)
linux-image-5.4.0-77-lowlatency (Ubuntu package)
linux-image-snapdragon-hwe-18.04 (Ubuntu package)
linux-image-generic-lpae-hwe-18.04 (Ubuntu package)
linux-image-lowlatency-hwe-18.04 (Ubuntu package)
linux-image-generic-hwe-18.04 (Ubuntu package)
linux-image-virtual-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1018-gkeop (Ubuntu package)
linux-image-gkeop-5.4 (Ubuntu package)
linux-image-gkeop (Ubuntu package)
linux-image-raspi-hwe-18.04 (Ubuntu package)
linux-image-5.4.0-1038-raspi (Ubuntu package)
linux-image-raspi (Ubuntu package)
linux-image-5.4.0-1041-kvm (Ubuntu package)
linux-image-gcp (Ubuntu package)
linux-image-5.4.0-1046-gke (Ubuntu package)
linux-image-gke-5.4 (Ubuntu package)
linux-image-5.4.0-1046-gcp (Ubuntu package)
linux-image-gke (Ubuntu package)
linux-image-gcp-lts-20.04 (Ubuntu package)
linux-image-oracle-lts-20.04 (Ubuntu package)
linux-image-5.4.0-1048-oracle (Ubuntu package)
linux-image-oracle (Ubuntu package)
linux-image-azure (Ubuntu package)
linux-image-aws (Ubuntu package)
linux-image-azure-lts-20.04 (Ubuntu package)
linux-image-5.4.0-1051-aws (Ubuntu package)
linux-image-aws-lts-20.04 (Ubuntu package)
linux-image-5.4.0-1051-azure (Ubuntu package)
linux-image-generic-64k (Ubuntu package)
linux-image-5.8.0-59-generic-64k (Ubuntu package)
linux-image-5.8.0-59-lowlatency (Ubuntu package)
linux-image-5.8.0-59-generic (Ubuntu package)
linux-image-5.8.0-59-generic-lpae (Ubuntu package)
linux-image-virtual-hwe-20.04 (Ubuntu package)
linux-image-generic-lpae-hwe-20.04 (Ubuntu package)
linux-image-generic-64k-hwe-20.04 (Ubuntu package)
linux-image-lowlatency-hwe-20.04 (Ubuntu package)
linux-image-generic-hwe-20.04 (Ubuntu package)
linux-image-raspi-nolpae (Ubuntu package)
linux-image-5.8.0-1029-raspi-nolpae (Ubuntu package)
linux-image-5.8.0-1029-raspi (Ubuntu package)
linux-image-5.8.0-1030-kvm (Ubuntu package)
linux-image-5.8.0-1033-oracle (Ubuntu package)
linux-image-5.8.0-1035-gcp (Ubuntu package)
linux-image-5.8.0-1036-azure (Ubuntu package)
linux-image-5.8.0-1038-aws (Ubuntu package)

Install updates from vendor's website.

Intel Dual Band Wireless-AC 3168 - update to 19.51.33.1
Intel Wireless 7265 (Rev D) Family - update to 19.51.33.1
Intel Dual Band Wireless-AC 3165 - update to 19.51.33.1
Intel Dual Band Wireless-AC 8265 - update to 20.70.21.2
Intel Dual Band Wireless-AC 8260 - update to 20.70.21.2
Intel Wi-Fi 6E AX210 - update to 22.30.0.11
Intel Wi-Fi 6 AX201 - update to 22.30.0.11
Intel Wi-Fi 6 AX200 - update to 22.30.0.11
Intel Wireless-AC 9560 - update to 22.30.0.11
Intel Wireless-AC 9462 - update to 22.30.0.11
Intel Wireless-AC 9461 - update to 22.30.0.11
Intel Wireless-AC 9260 - update to 22.30.0.11
WX3310-B0 - update to 1.00(ABSF.2)C0
TropOS - update to 8.9.4.9
linux-image-aws-hwe (Ubuntu package) - update to Ubuntu Pro (Infra-only)
EMG1702-T10A - update to 1.00(ABNZ.1)C0
LTE7490-M904 - update to 1.00(ABQY.3)C0
LTE7480-M804 - update to 1.00(ABRA.3)C0
NR5101 - update to 1.00(ABVC.3)C0
NR7101 - update to 1.00(ABUV.4)C0
NR2101 - update to 1.00(ABUS.5)C0
LTE5388-S905 - update to 1.00(ABVI.5)C0
LTE7485-S905 - update to 1.00(ABVN.5)C0
kernel-livepatch-4_12_14-197_92-default - update to 1-3.3.1
kernel-livepatch-SLE15-SP2_Update_14-debugsource - update to 1-5.3.2
kernel-livepatch-5_3_18-24_67-default-debuginfo - update to 1-5.3.2
kernel-livepatch-5_3_18-24_67-default - update to 1-5.3.2
kgraft-patch-4_12_14-95_77-default - update to 1-6.3.1
kernel-livepatch-5_3_18-59_5-default - update to 1-7.5.1
kernel-livepatch-5_3_18-59_5-default-debuginfo - update to 1-7.5.1
kernel-livepatch-SLE15-SP3_Update_1-debugsource - update to 1-7.5.1
kgraft-patch-4_12_14-122_74-default - update to 1-8.3.1
LTE7240-M403 - update to 2.00(ABMG.4)C0
LTE7461-M602 - update to 2.00(ABQN.4)C0
LTE7480-S905 - update to 2.00(ABQT.5)C0
linux-4.4.276/kernel-modules - update to 4.4.276
linux-4.4.276/kernel-huge - update to 4.4.276
linux-4.4.276/kernel-generic - update to 4.4.276
linux-4.4.276/kernel-headers - update to 4.4.276_smp
kernel-source-rt - addressed in versions 4.12.14-10.46.1, 5.3.18-8.13.1, 5.3.18-39.1
kernel-rt-base - update to 4.12.14-10.46.1
kernel-devel-rt - addressed in versions 4.12.14-10.46.1, 5.3.18-8.13.1, 5.3.18-39.1
dlm-kmp-rt-debuginfo - addressed in versions 4.12.14-10.46.1, 5.3.18-8.13.1, 5.3.18-39.1
cluster-md-kmp-rt - addressed in versions 4.12.14-10.46.1, 5.3.18-8.13.1, 5.3.18-39.1
cluster-md-kmp-rt-debuginfo - addressed in versions 4.12.14-10.46.1, 5.3.18-8.13.1, 5.3.18-39.1
dlm-kmp-rt - addressed in versions 4.12.14-10.46.1, 5.3.18-8.13.1, 5.3.18-39.1
gfs2-kmp-rt-debuginfo - addressed in versions 4.12.14-10.46.1, 5.3.18-8.13.1, 5.3.18-39.1
ocfs2-kmp-rt-debuginfo - addressed in versions 4.12.14-10.46.1, 5.3.18-8.13.1, 5.3.18-39.1
ocfs2-kmp-rt - addressed in versions 4.12.14-10.46.1, 5.3.18-8.13.1, 5.3.18-39.1
kernel-syms-rt - addressed in versions 4.12.14-10.46.1, 5.3.18-8.13.1, 5.3.18-39.1
kernel-rt_debug-devel-debuginfo - addressed in versions 4.12.14-10.46.1, 5.3.18-8.13.1, 5.3.18-39.1
kernel-rt_debug-devel - addressed in versions 4.12.14-10.46.1, 5.3.18-8.13.1, 5.3.18-39.1
kernel-rt_debug-debugsource - addressed in versions 4.12.14-10.46.1, 5.3.18-8.13.1, 5.3.18-39.1
kernel-rt_debug-debuginfo - addressed in versions 4.12.14-10.46.1, 5.3.18-8.13.1, 5.3.18-39.1
kernel-rt_debug - addressed in versions 4.12.14-10.46.1, 5.3.18-39.1
kernel-rt-devel - addressed in versions 4.12.14-10.46.1, 5.3.18-8.13.1, 5.3.18-39.1
kernel-rt-debugsource - addressed in versions 4.12.14-10.46.1, 5.3.18-8.13.1, 5.3.18-39.1
kernel-rt-debuginfo - addressed in versions 4.12.14-10.46.1, 5.3.18-8.13.1, 5.3.18-39.1
kernel-rt-base-debuginfo - update to 4.12.14-10.46.1
gfs2-kmp-rt - addressed in versions 4.12.14-10.46.1, 5.3.18-8.13.1, 5.3.18-39.1
kernel-rt - addressed in versions 4.12.14-10.46.1, 5.3.18-8.13.1, 5.3.18-39.1
kernel-rt-devel-debuginfo - addressed in versions 4.12.14-10.46.1, 5.3.18-8.13.1, 5.3.18-39.1
kernel-azure-debuginfo - addressed in versions 4.12.14-16.59.1, 5.3.18-18.50.2, 5.3.18-38.3.1
kernel-source-azure - addressed in versions 4.12.14-16.59.1, 5.3.18-18.50.2, 5.3.18-38.3.1
kernel-devel-azure - addressed in versions 4.12.14-16.59.1, 5.3.18-18.50.2, 5.3.18-38.3.1
kernel-syms-azure - addressed in versions 4.12.14-16.59.1, 5.3.18-18.50.1, 5.3.18-38.3.1
kernel-azure-devel - addressed in versions 4.12.14-16.59.1, 5.3.18-18.50.2, 5.3.18-38.3.1
kernel-azure-debugsource - addressed in versions 4.12.14-16.59.1, 5.3.18-18.50.2, 5.3.18-38.3.1
kernel-azure-base-debuginfo - update to 4.12.14-16.59.1
kernel-azure-base - update to 4.12.14-16.59.1
kernel-azure - addressed in versions 4.12.14-16.59.1, 5.3.18-18.50.2, 5.3.18-38.3.1
cluster-md-kmp-default - addressed in versions 4.12.14-95.77.1, 4.12.14-122.74.1, 4.12.14-197.92.1, 5.3.18-24.67.3, 5.3.18-59.5.2
kernel-default-kgraft-devel - addressed in versions 4.12.14-95.77.1, 4.12.14-122.74.1
kernel-syms - addressed in versions 4.12.14-95.77.1, 4.12.14-122.74.1, 4.12.14-197.92.1, 5.3.18-24.67.1, 5.3.18-59.5.1
kernel-default-kgraft - addressed in versions 4.12.14-95.77.1, 4.12.14-122.74.1
kernel-default-man - addressed in versions 4.12.14-95.77.1, 4.12.14-122.74.1, 4.12.14-197.92.1
kernel-source - addressed in versions 4.12.14-95.77.1, 4.12.14-122.74.1, 4.12.14-197.92.1, 5.3.18-24.67.2, 5.3.18-59.5.2
kernel-macros - addressed in versions 4.12.14-95.77.1, 4.12.14-122.74.1, 4.12.14-197.92.1, 5.3.18-24.67.2, 5.3.18-59.5.2
kernel-devel - addressed in versions 4.12.14-95.77.1, 4.12.14-122.74.1, 4.12.14-197.92.1, 5.3.18-24.67.2, 5.3.18-59.5.2
kernel-default-base-debuginfo - addressed in versions 4.12.14-95.77.1, 4.12.14-122.74.1, 4.12.14-197.92.1
kernel-default-devel - addressed in versions 4.12.14-95.77.1, 4.12.14-122.74.1, 4.12.14-197.92.1, 5.3.18-24.67.3, 5.3.18-59.5.2
kernel-default-debugsource - addressed in versions 4.12.14-95.77.1, 4.12.14-122.74.1, 4.12.14-197.92.1, 5.3.18-24.67.3, 5.3.18-59.5.2
kernel-default-debuginfo - addressed in versions 4.12.14-95.77.1, 4.12.14-122.74.1, 4.12.14-197.92.1, 5.3.18-24.67.3, 5.3.18-59.5.2
kernel-default-devel-debuginfo - addressed in versions 4.12.14-95.77.1, 4.12.14-122.74.1, 4.12.14-197.92.1, 5.3.18-24.67.3, 5.3.18-59.5.2
cluster-md-kmp-default-debuginfo - addressed in versions 4.12.14-95.77.1, 4.12.14-122.74.1, 4.12.14-197.92.1, 5.3.18-24.67.3, 5.3.18-59.5.2
kernel-default-base - addressed in versions 4.12.14-95.77.1, 4.12.14-122.74.1, 4.12.14-197.92.1, 5.3.18-24.67.3.9.30.2, 5.3.18-59.5.2.18.2.2
kernel-default - addressed in versions 4.12.14-95.77.1, 4.12.14-122.74.1, 4.12.14-197.92.1, 5.3.18-24.67.3, 5.3.18-59.5.2
ocfs2-kmp-default-debuginfo - addressed in versions 4.12.14-95.77.1, 4.12.14-122.74.1, 4.12.14-197.92.1, 5.3.18-24.67.3, 5.3.18-59.5.2
ocfs2-kmp-default - addressed in versions 4.12.14-95.77.1, 4.12.14-122.74.1, 4.12.14-197.92.1, 5.3.18-24.67.3, 5.3.18-59.5.2
gfs2-kmp-default-debuginfo - addressed in versions 4.12.14-95.77.1, 4.12.14-122.74.1, 4.12.14-197.92.1, 5.3.18-24.67.3, 5.3.18-59.5.2
gfs2-kmp-default - addressed in versions 4.12.14-95.77.1, 4.12.14-122.74.1, 4.12.14-197.92.1, 5.3.18-24.67.3, 5.3.18-59.5.2
dlm-kmp-default-debuginfo - addressed in versions 4.12.14-95.77.1, 4.12.14-122.74.1, 4.12.14-197.92.1, 5.3.18-24.67.3, 5.3.18-59.5.2
dlm-kmp-default - addressed in versions 4.12.14-95.77.1, 4.12.14-122.74.1, 4.12.14-197.92.1, 5.3.18-24.67.3, 5.3.18-59.5.2
kernel-obs-build-debugsource - addressed in versions 4.12.14-122.74.1, 4.12.14-197.92.1, 5.3.18-24.67.2, 5.3.18-59.5.1
kernel-obs-build - addressed in versions 4.12.14-122.74.1, 4.12.14-197.92.1, 5.3.18-24.67.2, 5.3.18-59.5.1
kernel-default-extra-debuginfo - addressed in versions 4.12.14-122.74.1, 5.3.18-24.67.3, 5.3.18-59.5.2
kernel-default-extra - addressed in versions 4.12.14-122.74.1, 5.3.18-24.67.3, 5.3.18-59.5.2
kernel-docs - addressed in versions 4.12.14-122.74.2, 4.12.14-197.92.1, 5.3.18-24.67.3, 5.3.18-59.5.2
reiserfs-kmp-default-debuginfo - addressed in versions 4.12.14-197.92.1, 5.3.18-24.67.3, 5.3.18-59.5.2
reiserfs-kmp-default - addressed in versions 4.12.14-197.92.1, 5.3.18-24.67.3, 5.3.18-59.5.2
kernel-default-livepatch-devel - addressed in versions 4.12.14-197.92.1, 5.3.18-24.67.3, 5.3.18-59.5.2
kernel-default-livepatch - addressed in versions 4.12.14-197.92.1, 5.3.18-24.67.3, 5.3.18-59.5.2
kernel-zfcpdump-debugsource - addressed in versions 4.12.14-197.92.1, 5.3.18-59.5.2
kernel-zfcpdump-debuginfo - addressed in versions 4.12.14-197.92.1, 5.3.18-59.5.2
linux-image-virtual (Ubuntu package) - addressed in versions 4.15.0.151.139, 5.4.0.77.80, 5.8.0.59.64
linux-image-lowlatency (Ubuntu package) - addressed in versions 4.15.0.151.139, 5.4.0.77.80, 5.8.0.59.64
linux-image-generic-lpae (Ubuntu package) - addressed in versions 4.15.0.151.139, 5.4.0.77.80, 5.8.0.59.64
linux-image-generic (Ubuntu package) - addressed in versions 4.15.0.151.139, 5.4.0.77.80, 5.8.0.59.64
linux-image-4.15.0-151-lowlatency (Ubuntu package) - update to 4.15.0-151.157
linux-image-4.15.0-151-generic-lpae (Ubuntu package) - update to 4.15.0-151.157
linux-image-4.15.0-151-generic (Ubuntu package) - update to 4.15.0-151.157
linux-image-virtual-hwe-16.04 (Ubuntu package) - update to 4.15.0.210.193
linux-image-generic-hwe-16.04 (Ubuntu package) - update to 4.15.0.210.193
linux-image-lowlatency-hwe-16.04 (Ubuntu package) - update to 4.15.0.210.193
linux-image-4.15.0-1078-oracle (Ubuntu package) - update to 4.15.0-1078.86
linux-image-oracle-lts-18.04 (Ubuntu package) - update to 4.15.0.1078.88
linux-image-raspi2 (Ubuntu package) - addressed in versions 4.15.0.1092.90, 5.4.0.1038.73
linux-image-4.15.0-1092-raspi2 (Ubuntu package) - update to 4.15.0-1092.98
linux-image-kvm (Ubuntu package) - addressed in versions 4.15.0.1097.93, 5.4.0.1041.39, 5.8.0.1030.32
linux-image-4.15.0-1097-kvm (Ubuntu package) - update to 4.15.0-1097.99
linux-image-4.15.0-1106-gcp (Ubuntu package) - update to 4.15.0-1106.120
linux-image-gcp-lts-18.04 (Ubuntu package) - update to 4.15.0.1106.125
linux-image-aws-lts-18.04 (Ubuntu package) - update to 4.15.0.1109.112
linux-image-snapdragon (Ubuntu package) - update to 4.15.0.1109.112
linux-image-4.15.0-1109-aws (Ubuntu package) - update to 4.15.0-1109.116
linux-image-4.15.0-1109-snapdragon (Ubuntu package) - update to 4.15.0-1109.118
linux-image-azure-lts-18.04 (Ubuntu package) - update to 4.15.0.1121.94
linux-image-4.15.0-1121-azure (Ubuntu package) - update to 4.15.0-1121.134
kernel (Red Hat package) - update to 4.18.0-348.el8
kernel-rt (Red Hat package) - update to 4.18.0-348.rt7.130.el8
kernel-headers - update to 4.19.91-25.6
python3-perf - update to 4.19.91-25.6
perf - update to 4.19.91-25.6
kernel-tools-libs-devel - update to 4.19.91-25.6
kernel-tools-libs - update to 4.19.91-25.6
kernel-tools - update to 4.19.91-25.6
kernel-modules-internal - update to 4.19.91-25.6
kernel-modules-extra - update to 4.19.91-25.6
kernel-modules - update to 4.19.91-25.6
bpftool - update to 4.19.91-25.6
kernel-devel - update to 4.19.91-25.6
kernel-debug-modules-extra - update to 4.19.91-25.6
kernel-debug-modules - update to 4.19.91-25.6
kernel-debug-devel - update to 4.19.91-25.6
kernel-debug-core - update to 4.19.91-25.6
kernel-debug - update to 4.19.91-25.6
kernel-core - update to 4.19.91-25.6
kernel - update to 4.19.91-25.6
kernel-azure-devel-debuginfo - addressed in versions 5.3.18-18.50.2, 5.3.18-38.3.1
kernel-preempt - addressed in versions 5.3.18-24.67.4, 5.3.18-59.5.2
kernel-preempt-devel-debuginfo - addressed in versions 5.3.18-24.67.4, 5.3.18-59.5.2
kernel-preempt-devel - addressed in versions 5.3.18-24.67.4, 5.3.18-59.5.2
kernel-preempt-debugsource - addressed in versions 5.3.18-24.67.4, 5.3.18-59.5.2
kernel-preempt-debuginfo - addressed in versions 5.3.18-24.67.4, 5.3.18-59.5.2
kernel-preempt-extra-debuginfo - addressed in versions 5.3.18-24.67.4, 5.3.18-59.5.2
kernel-preempt-extra - addressed in versions 5.3.18-24.67.4, 5.3.18-59.5.2
kernel-zfcpdump - update to 5.3.18-59.5.2
kernel-64kb-devel-debuginfo - update to 5.3.18-59.5.2
kernel-64kb-devel - update to 5.3.18-59.5.2
kernel-64kb-debugsource - update to 5.3.18-59.5.2
kernel-64kb-debuginfo - update to 5.3.18-59.5.2
kernel-64kb - update to 5.3.18-59.5.2
linux-image-oem (Ubuntu package) - addressed in versions 5.4.0.77.80, 5.4.0.77.86~18.04.69, 5.4.0.202.198
linux-image-oem-osp1 (Ubuntu package) - addressed in versions 5.4.0.77.80, 5.4.0.77.86~18.04.69
linux-image-5.4.0-77-generic-lpae (Ubuntu package) - addressed in versions 5.4.0-77.86, 5.4.0-77.86~18.04.1
linux-image-5.4.0-77-generic (Ubuntu package) - addressed in versions 5.4.0-77.86, 5.4.0-77.86~18.04.1
linux-image-5.4.0-77-lowlatency (Ubuntu package) - addressed in versions 5.4.0-77.86, 5.4.0-77.86~18.04.1
linux-image-snapdragon-hwe-18.04 (Ubuntu package) - update to 5.4.0.77.86~18.04.69
linux-image-generic-lpae-hwe-18.04 (Ubuntu package) - update to 5.4.0.77.86~18.04.69
linux-image-lowlatency-hwe-18.04 (Ubuntu package) - update to 5.4.0.77.86~18.04.69
linux-image-generic-hwe-18.04 (Ubuntu package) - update to 5.4.0.77.86~18.04.69
linux-image-virtual-hwe-18.04 (Ubuntu package) - update to 5.4.0.77.86~18.04.69
linux-image-5.4.0-1018-gkeop (Ubuntu package) - addressed in versions 5.4.0-1018.19, 5.4.0-1018.19~18.04.1
linux-image-gkeop-5.4 (Ubuntu package) - addressed in versions 5.4.0.1018.19~18.04.19, 5.4.0.1018.21
linux-image-gkeop (Ubuntu package) - update to 5.4.0.1018.21
linux-image-raspi-hwe-18.04 (Ubuntu package) - update to 5.4.0.1038.40
linux-image-5.4.0-1038-raspi (Ubuntu package) - addressed in versions 5.4.0-1038.41, 5.4.0-1038.41~18.04.1
linux-image-raspi (Ubuntu package) - addressed in versions 5.4.0.1038.73, 5.8.0.1029.31
linux-image-5.4.0-1041-kvm (Ubuntu package) - update to 5.4.0-1041.42
linux-image-gcp (Ubuntu package) - addressed in versions 5.4.0.1046.33, 5.8.0.1035.35, 5.8.0.1035.37~20.04.9, 6.8.0-1019.21~22.04.1
linux-image-5.4.0-1046-gke (Ubuntu package) - addressed in versions 5.4.0-1046.48, 5.4.0-1046.48~18.04.1
linux-image-gke-5.4 (Ubuntu package) - addressed in versions 5.4.0.1046.48~18.04.12, 5.4.0.1046.55
linux-image-5.4.0-1046-gcp (Ubuntu package) - addressed in versions 5.4.0-1046.49, 5.4.0-1046.49~18.04.1
linux-image-gke (Ubuntu package) - addressed in versions 5.4.0.1046.55, 5.8.0.1035.35, 6.8.0-1015.19
linux-image-gcp-lts-20.04 (Ubuntu package) - update to 5.4.0.1046.55
linux-image-oracle-lts-20.04 (Ubuntu package) - update to 5.4.0.1048.48
linux-image-5.4.0-1048-oracle (Ubuntu package) - addressed in versions 5.4.0-1048.52, 5.4.0-1048.52~18.04.1
linux-image-oracle (Ubuntu package) - addressed in versions 5.4.0.1048.52~18.04.30, 5.8.0.1033.32, 5.8.0.1033.34~20.04.9, 6.8.0-1017.18~22.04.1
linux-image-azure (Ubuntu package) - addressed in versions 5.4.0.1051.30, 5.8.0.1036.36, 5.8.0.1036.38~20.04.8, 6.8.0-1018.21~22.04.1
linux-image-aws (Ubuntu package) - addressed in versions 5.4.0.1051.33, 5.8.0.1038.40~20.04.11
linux-image-azure-lts-20.04 (Ubuntu package) - update to 5.4.0.1051.49
linux-image-5.4.0-1051-aws (Ubuntu package) - addressed in versions 5.4.0-1051.53, 5.4.0-1051.53~18.04.1
linux-image-aws-lts-20.04 (Ubuntu package) - update to 5.4.0.1051.53
linux-image-5.4.0-1051-azure (Ubuntu package) - addressed in versions 5.4.0-1051.53, 5.4.0-1051.53~18.04.1
linux-image-generic-64k (Ubuntu package) - update to 5.8.0.59.64
linux-image-5.8.0-59-generic-64k (Ubuntu package) - update to 5.8.0-59.66~20.04.1
linux-image-5.8.0-59-lowlatency (Ubuntu package) - update to 5.8.0-59.66~20.04.1
linux-image-5.8.0-59-generic (Ubuntu package) - update to 5.8.0-59.66~20.04.1
linux-image-5.8.0-59-generic-lpae (Ubuntu package) - update to 5.8.0-59.66~20.04.1
linux-image-virtual-hwe-20.04 (Ubuntu package) - update to 5.8.0.59.66~20.04.42
linux-image-generic-lpae-hwe-20.04 (Ubuntu package) - update to 5.8.0.59.66~20.04.42
linux-image-generic-64k-hwe-20.04 (Ubuntu package) - update to 5.8.0.59.66~20.04.42
linux-image-lowlatency-hwe-20.04 (Ubuntu package) - update to 5.8.0.59.66~20.04.42
linux-image-generic-hwe-20.04 (Ubuntu package) - update to 5.8.0.59.66~20.04.42
linux-image-raspi-nolpae (Ubuntu package) - update to 5.8.0.1029.31
linux-image-5.8.0-1029-raspi-nolpae (Ubuntu package) - update to 5.8.0-1029.32
linux-image-5.8.0-1029-raspi (Ubuntu package) - update to 5.8.0-1029.32
linux-image-5.8.0-1030-kvm (Ubuntu package) - update to 5.8.0-1030.32
linux-image-5.8.0-1033-oracle (Ubuntu package) - update to 5.8.0-1033.34~20.04.1
linux-image-5.8.0-1035-gcp (Ubuntu package) - update to 5.8.0-1035.37~20.04.1
linux-image-5.8.0-1036-azure (Ubuntu package) - update to 5.8.0-1036.38~20.04.1
linux-image-5.8.0-1038-aws (Ubuntu package) - update to 5.8.0-1038.40~20.04.1
VMG4927-B50A - update to V5.13(ABLY.6)C0
VMG3927-B50B - update to 5.13(ABLY.6)C0
VMG9827-B50A - update to 5.13(ABLY.6)C0
EMG6726-B10A - update to 5.13(ABNP.6)C0
EMG8726-B50A - update to 5.13(ABNP.6)C0
EX5510-B0 - update to 5.15(ABQX.5)C0
DX4510-B0 - update to 5.17(ABYL.0)C0
EX5501-B0 - update to 5.17(ABRY.2)C0
EX3510-B0 - update to V5.17(ABUP.3)C0
XMG3927-B50A - update to 5.17(ABMT.6)C0
XMG8825-B50A - update to 5.17(ABMT.6)C0
VMG3927-B50A_B60A - update to 5.17(ABMT.6)C0
VMG8825-B50A_B60A - update to 5.17(ABMT.6)C0
VMG8825-Bx0B - update to 5.17(ABNY.7)C0
PMG5617GA - update to 5.40(ABNA.2)
PMG5622GA - update to 5.40(ABNB.2)
PMG5317-T20B - update to 5.40(ABKI.4)
EMG3524-T10A - update to 5.41(ABXU.1)C0
EMG3525-T50B - addressed in versions 5.50(ABSL.0)C0, 5.50(ABPM.6)C0
EMG5523-T50B - addressed in versions 5.50(ABSL.0)C0, 5.50(ABPM.6)C0
VMG1312-T20B - update to 5.50(ABSB.5)C0
VMG8623-T50B - update to 5.50(ABPM.6)C0
VMG3625-T50B - update to 5.50(ABPM.6)C0
EMG5723-T50K - update to 5.50(ABOM.7)C0
VMG8825-T50K - update to 5.50(ABOM.7)C0
VMG3927-T50K - update to 5.50(ABOM.7)C0
WAC6303D-S - update to 6.25(ABGL.0)
NWA5123-AC HD - update to 6.25(ABIM.0)
NWA1123-AC HD - update to 6.25(ABIN.0)
WAC5302D-Sv2 - update to 6.25(ABVZ.0)
WAC5302D-S - update to 6.25(ABFH.8)

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00473.html

• Denial of service in Intel PROSet/Wireless WiFi, vPro CSME WiFi and Killer WiFi products
• Multiple vulnerabilities in Zyxel WiFi products
• 802.11 Frame Aggregation and Fragmentation Vulnerabilities in Cisco Webex Wireless Phone 840 and 860
• Multiple vulnerabilities in Webex Board Series
• Multiple vulnerabilities in Cisco Catalyst 9117 APs and Catalyst 9130 APs
• Multiple vulnerabilities in Cisco Webex Desk Series and Webex Room Series
• Multiple vulnerabilities in Cisco Wireless IP Phone 8821
• Multiple vulnerabilities in Cisco IP Phone 8861 Running Third-Party Call Control (3PCC) Software
• Multiple vulnerabilities in Cisco IP Phone 8861 and 8865
• Multiple vulnerabilities in Cisco IP Phone 6861
• Multiple vulnerabilities in Cisco IP Conference Phone 8832
• Multiple vulnerabilities in Cisco Meraki MX67W, MX67CW, MX68W, MX68CW, Z3, Z3C
• Multiple vulnerabilities in Cisco Meraki products
• Multiple vulnerabilities in Cisco Catalyst products
• Multiple vulnerabilities in Cisco Aironet 1850 Series APs
• Multiple vulnerabilities in Cisco Aironet products
• Multiple vulnerabilities in Hitachi ABB Power Grids TropOS
• Multiple vulnerabilities in Mitsubishi Electric GT25-WLAN
• Red Hat Enterprise Linux 8 update for kernel-rt
• Red Hat Enterprise Linux 8 update for kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel
• Ubuntu update for linux
• Ubuntu update for linux
• Ubuntu update for linux-kvm
• Ubuntu update for linux
• Slackware Linux update for kernel
• Anolis OS update for kernel