Patchfirst
ChainLinux

Linux: incomplete fixes (2020–2025)

3 CVEs over 2 generations, 11 May 2021 to 16 Aug 2025.

Family tree

Left to right by publication date.Oldest first. Select a CVE to open it.
  1. CVE-2020-2458811 May 2021 First in the chain
  2. CVE-2025-2755821 May 2025 incomplete fix for CVE-2020-24588
  3. CVE-2025-3851216 Aug 2025 variant of CVE-2020-24588
2021202320242025 CVE-2020-24588 → CVE-2025-27558: incomplete fix (high confidence)CVE-2020-24588 → CVE-2025-38512: variant in the same code (high confidence) CVE-2020-24588 11 May 2021 CVE-2025-27558 21 May 2025 CVE-2025-38512 16 Aug 2025 20212022202320242025 CVE-2020-24588 → CVE-2025-27558: incomplete fix (high confidence)CVE-2020-24588 → CVE-2025-38512: variant in the same code (high confidence) CVE-2020-24588 11 May 2021 CVE-2025-27558 21 May 2025 CVE-2025-38512 16 Aug 2025
Exploited in the wild (CISA KEV) Not in KEV Priority score (0 to 100) High confidence Medium Low

CVEs in this family

Table view of the tree
CVEPublishedTitleLinked fromPriority
CVE-2020-24588 11 May 2021 The 802.11 standard that underpins Wi-Fi Protected Access (WPA, WPA2, and WPA3) and Wired Equivalent Privacy (WEP)… First in chain 17.9
CVE-2025-27558 21 May 2025 IEEE P802.11-REVme D1.1 through D7.0 allows FragAttacks against mesh networks CVE-2020-24588 · incomplete fix · High 16.2
CVE-2025-38512 16 Aug 2025 wifi: prevent A-MSDU attacks in mesh networks CVE-2020-24588 · variant in the same code · High 9.1
↑ ↓ chooseEnter openEsc close