Critical Linux Kernel Vulnerabilities Exploited via WiFi Mesh Networks

On September 2, 2026, Ubuntu published advisories regarding critical vulnerabilities in the Linux kernel, specifically affecting the WiFi implementation in mesh networks. Discovered by researchers Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef, these vulnerabilities stem from an incorrect fix for CVE-2020-24588, allowing physically proximate attackers to inject packets (CVE-2025-27558). The vulnerabilities impact various subsystems, including x86 architecture, network drivers, and file systems, potentially compromising affected systems. Users are advised to update their systems immediately and reboot to apply necessary changes. The vulnerabilities were disclosed alongside a patch, emphasizing the urgency for system administrators to act swiftly. The advisory indicates that multiple subsystems are affected, increasing the risk of exploitation across different environments.

Key Points: • Critical vulnerabilities in the Linux kernel allow packet injection in WiFi mesh networks. • CVE-2025-27558 is linked to an incorrect fix for CVE-2020-24588. • Immediate system updates and reboots are required to mitigate risks.