Critical Linux Kernel Vulnerabilities Expose WiFi Systems to Injection Attacks

Multiple vulnerabilities have been discovered in the Linux kernel affecting various distributions, including Ubuntu 20.04 and 18.04. Researchers Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef identified that the WiFi implementation fails to handle aggregated frames in mesh networks, allowing a physically proximate attacker to inject packets (CVE-2025-27558). The vulnerabilities impact several subsystems, including x86 architecture, InfiniBand drivers, and network protocols. Users are urged to update their systems immediately to mitigate risks. The flaws were disclosed on September 2, 2026, and are part of a broader set of security issues affecting the Linux kernel. Affected systems include those running on Oracle Cloud and AWS. After applying the updates, a system reboot is necessary to implement changes. The vulnerabilities are critical, requiring urgent attention from system administrators.

Key Points: • Critical vulnerabilities in the Linux kernel allow WiFi packet injection. • CVE-2025-27558 is the primary CVE associated with this issue. • Immediate updates and system reboots are required to mitigate risks.