Search: CVE-2025-27558

CVE-2025-27558 is a vulnerability in the Linux kernel's WiFi implementation affecting mesh networks using IEEE P802.11-REVme drafts D1.1 through D7.0. The issue arises from an incorrect fix for a previous vulnerability (CVE-2020-24588) and allows a physically proximate attacker to inject arbitrary frames into mesh networks that support non-SSP A-MSDU frames. This affects Linux Azure kernel versions including specific 4.11.x, 4.13.x, and 4.15.x low latency releases. A patch is available and distributed via Ubuntu security updates, requiring a system reboot and recompilation of third-party kernel modules due to ABI changes.