Ubuntu USN-8631-2: Linux Kernel WiFi Aggregation Frame Vulnerability Fix (CVE-2020-24588)

Vulnerability Overview Vulnerability ID: USN-8631-2 Publication Date: August 13, 2026 Description: Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the Linux kernel's WiFi implementation failed to properly handle aggregation frames, leading to an incorrect fix for CVE-2020-24588 in mesh networks. An attacker with physical proximity can exploit this issue to inject packets. Scope of Impact Affected Systems: Linux kernel Affected Subsystems: - x86 architecture - InfiniBand drivers - Network drivers - NVME drivers - Ext4 filesystem - SMB network filesystem - IPv4 networking - Network traffic control - TCP network protocol - Locking primitives - IPv6 networking - Multipath TCP - Netfilter - SCTP protocol - SMC Remediation Update Notes: - A system restart is required after updating standard systems to apply all necessary changes. - Due to ABI changes, kernel updates have been assigned new version numbers, requiring all third-party kernel modules to be recompiled and reinstalled. - Standard system upgrades will perform this automatically unless the standard kernel meta-packages (such as , , , ) are manually removed. Update Package Versions: - Ubuntu 22.04 LTS (Jammy) - – 5.15.0-1110.116 - – 5.15.0-1110.106 - – 5.15.0-1110.106 References CVE-2026-53359 CVE-2026-53228 CVE-2026-53225 CVE-2026-53215 CVE-2026-53212 CVE-2026-53176 CVE-2026-53086 CVE-2026-52999 CVE-2026-52924 CVE-2026-46331 Related Notices USN-8637-1 USN-8636-1 USN-8635-1 USN-8634-1 USN-8633-1 USN-8631-1 USN-8630-1 USN-8630-2 USN-8629-1 USN-8619-1 Risk Mitigation Ubuntu Pro provides ten years of security coverage for over 25,000 packages in the Main and Universe repositories, available for up to five machines free of charge. Additional Information Contact Team: For further questions, please contact the team members. Footer Information: Includes links to Ubuntu and Canonical trademarks, legal information, data privacy, management tracker settings, reporting website errors, and more.

Goal Reached Thanks to every supporter — we hit 100%!

Ubuntu USN-8631-2: Linux Kernel WiFi Aggregation Frame Vulnerability Fix (CVE-2020-24588)