FragAttacks: New Security Vulnerabilities Affecting WiFi Devices, 12 CVEs Issued

Written by Michael Larabel in Linux Security on 12 May 2021 at 08:37 AM EDT. 26 Comments
FragAttacks was made public on Tuesday as a set of new security vulnerabilities affecting WiFi devices. These are just not some driver-level bugs but rather three of the vulnerabilities are attributed as design flaws in the WiFi standard itself and in turn most devices on the market.

The FragAttacks researchers believe, "experiments indicate that every Wi-Fi product is affected by at least one vulnerability and that most products are affected by several vulnerabilities." WEP through WPA3 WiFi security is believed to be impacted but the researchers did also acknowledge "the design flaws are hard to abuse". Below is a video demonstration of some FragAttacks vulnerabilities in action:

FragAttacks encompasses plaintext injection vulnerabilities, the frame aggregation feature of WiFi potentially leading to an aggregation attack, the frame fragmentation feature of WiFi leading to a possible mixed key attack, and the WiFi frame fragmentation feature being exploited for a possible fragment cache attack. A dozen CVEs in total were issued for this FragAttacks research.

More details on these WiFi vulnerabilities at
Related News
About The Author
Michael Larabel

Michael Larabel is the principal author of and founded the site in 2004 with a focus on enriching the Linux hardware experience. Michael has written more than 20,000 articles covering the state of Linux hardware support, Linux performance, graphics drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and automated benchmarking software. He can be followed via Twitter, LinkedIn, or contacted via

Popular News This Week