Ubuntu USN-8666-2 Linux Kernel WiFi Aggregation Frame Vulnerability Advisory

Vulnerability Overview Vulnerability ID: USN-8666-2 Release Date: 25 August 2026 Description: Siebe Devroe, Héloïse Gallier, and Mathy Vanhoef discovered that the Linux kernel's WiFi implementation fails to properly handle aggregation frames, creating a potential vulnerability in mesh networks. An attacker with physical proximity can exploit this issue to inject packets. CVE ID: CVE-2025-27558 Affected Systems Affected Software: Linux Kernel Affected Subsystems: - x86 architecture - Cryptographic API - InfiniBand drivers - Media drivers - NVIDIA Tegra memory controller driver - Network drivers - NVME drivers - Filesystem infrastructure - Ext4 filesystem - IPv4 networking - Network traffic control - TCP networking protocol - Locking mechanisms Remediation Update Instructions: - A system restart is required after a standard system update to apply all necessary changes. - Due to ABI changes, the kernel update has been assigned a new version number, requiring all third-party kernel modules to be recompiled and reinstalled. - Standard system upgrades will perform this action automatically unless the standard kernel meta-packages (such as , , , ) are manually uninstalled. Fixed Versions: - Ubuntu 20.04 LTS (Focal): - – 5.4.0-1167.173+fips1 - – 5.4.0.1167.103 - – 5.4.0.1167.103 - Ubuntu 18.04 LTS (Bionic): - – 5.4.0-1167.173-18.04.1 - – 5.4.0.1167.173-18.04.1 - – 5.4.0.1167.173-18.04.1 References CVE IDs: - CVE-2026-53359 - CVE-2026-53228 - CVE-2026-53212 - CVE-2026-53176 - CVE-2026-53088 - CVE-2026-53045 - CVE-2026-53006 - CVE-2026-53002 - CVE-2026-52999 - CVE-2026-52993 Related Notices Related USN IDs: - USN-8669-1 - USN-8668-1 - USN-8667-1 - USN-8666-1 - USN-8665-1 - USN-8664-1 - USN-8663-1 - USN-8662-2 - USN-8662-1 - USN-8661-1 Additional Information Ubuntu Pro: Provides ten years of security coverage for 25,000+ packages in the Main and Universe repositories, free for up to five machines. Summary This vulnerability concerns the WiFi implementation in the Linux kernel, which could allow an attacker with physical proximity to inject packets. The remediation involves updating to specific versions of the Linux kernel and restarting the system to apply the changes.

Goal Reached Thanks to every supporter — we hit 100%!

Ubuntu USN-8666-2 Linux Kernel WiFi Aggregation Frame Vulnerability Advisory

More from this source