FlawAtlas
Search the atlas
CVE-2020-26139 Moderate

CVE-2020-26139

An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients.

Exploit probability 6.5%
Published May 11, 2021
Required by Not available
Last source change April 16, 2026

02 / AFFECTED SOFTWARE

Affected packages

Android platform/vendor/qcom-opensource/wlan/prima

1 explicit affected versions

Android platform/vendor/qcom-opensource/wlan/qca-wifi-host-cmn

1 explicit affected versions

Android platform/vendor/qcom-opensource/wlan/qcacld-3.0

1 explicit affected versions

Unknown Unknown

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities CVE-2020-26139

An issue was discovered in the kernel in NetBSD 7.1. An Access Point (AP) forwards EAPOL frames to other clients even though the sender has not yet successfully authenticated to the AP. This might be abused in projected Wi-Fi networks to launch denial-of-service attacks against connected clients and makes it easier to exploit other vulnerabilities in connected clients.

View original source

05 / REFERENCES

Further evidence