FragAttacks Vulnerability in Linux Packages: CVE-2025-27558
Summary
CVE-2025-27558: IEEE P802.11-REVme D1.1 through D7.0 allows FragAttacks against mesh networks. Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux package is a core component of Debian operating systems, providing essential functionalities for system operations and network management. It is widely used across various distributions, including Debian 11, 12, and 13. This package is crucial for maintaining system stability and security, but it is currently vulnerable to a specific issue that affects mesh networks utilizing Wi-Fi protocols.
Vulnerability Detail
CVE-2025-27558 is a vulnerability that allows FragAttacks against mesh networks using Wi-Fi Protected Access (WPA, WPA2, or WPA3) or Wired Equivalent Privacy (WEP). An adversary can exploit this vulnerability to inject arbitrary frames towards devices that support receiving non-SSP A-MSDU frames. This issue arises from an incorrect fix for CVE-2020-24588, making it a significant concern for network security as it can lead to unauthorized access and data manipulation.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable the use of non-SSP A-MSDU frames in their network configurations, though this may impact network performance and functionality. Consult your network device documentation for specific instructions on how to adjust these settings.
Conclusion
CVE-2025-27558 represents a significant vulnerability in Linux packages affecting Debian systems, particularly in mesh networks. Users are advised to update their packages promptly and consider workarounds to mitigate potential risks until a full patch is applied.
See every vulnerability recorded for linux →
FAQ
CVE-2025-27558 is a vulnerability that affects Linux packages in Debian systems, allowing attackers to exploit mesh networks through FragAttacks.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
FragAttacks are a class of vulnerabilities that allow attackers to exploit weaknesses in the fragmentation and assembly of data packets in wireless networks.
Yes, users are encouraged to update their Linux package to the latest version to mitigate this vulnerability.
If immediate updates are not possible, consider implementing the suggested workaround by disabling non-SSP A-MSDU frames in your network settings.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
