CVE-2020-36158

Name: CVE-2020-36158
Creator: NVD / NIST
Published: 2021-01-05T05:15:10.737+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

MEDIUMCVSS 6.7/10EPSS 2.21%

Last modified Jun 17, 2026

CVE-2020-36158 is a medium-severity vulnerability rated 6.7/10 on the CVSS scale. mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID-5c455c5ab332.. EPSS estimates a 2.21% chance of exploitation in the next 30 days.

Description

mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID-5c455c5ab332.

Metrics

CVSS 3.1

6.7/10

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS Probability

2.21%

80.3th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-120

Affected Software

Vendor	Product	Versions
Linux	Linux Kernel	>= 3.0, < 4.4.250
Linux	Linux Kernel	>= 4.5, < 4.9.250
Linux	Linux Kernel	>= 4.10, < 4.14.214
Linux	Linux Kernel	>= 4.15, < 4.19.166
Linux	Linux Kernel	>= 4.20, < 5.4.88
Linux	Linux Kernel	>= 5.5, < 5.10.6
Fedoraproject	Fedora	33
Debian	Debian Linux	9.0
Debian	Debian Linux	10.0
Netapp	Cloud Backup	All versions
Netapp	Solidfire Baseboard Management Controller Firmware	All versions

References

https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5c455c5ab332773464d02ba17015acdca198f03dPatch, Vendor Advisory
https://github.com/torvalds/linux/commit/5c455c5ab332773464d02ba17015acdca198f03dPatch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/02/msg00018.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/03/msg00010.htmlMailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HCHBIRS27VMOGMBHPWP2R7SZRFXT6O6U/
https://lore.kernel.org/r/20201206084801.26479-1-ruc_zhangxiaohui%40163.com
https://patchwork.kernel.org/project/linux-wireless/patch/20201206084801.26479-1-ruc_zhangxiaohui%40163.com/
https://security.netapp.com/advisory/ntap-20210212-0002/Third Party Advisory
https://www.debian.org/security/2021/dsa-4843Third Party Advisory
https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5c455c5ab332773464d02ba17015acdca198f03dPatch, Vendor Advisory
https://github.com/torvalds/linux/commit/5c455c5ab332773464d02ba17015acdca198f03dPatch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/02/msg00018.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/03/msg00010.htmlMailing List, Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HCHBIRS27VMOGMBHPWP2R7SZRFXT6O6U/
https://lore.kernel.org/r/20201206084801.26479-1-ruc_zhangxiaohui%40163.com
https://patchwork.kernel.org/project/linux-wireless/patch/20201206084801.26479-1-ruc_zhangxiaohui%40163.com/
https://security.netapp.com/advisory/ntap-20210212-0002/Third Party Advisory
https://www.debian.org/security/2021/dsa-4843Third Party Advisory

Timeline

Published: Jan 5, 2021
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2020-36158?

How severe is CVE-2020-36158?

CVE-2020-36158 has a CVSS score of 6.7/10 (MEDIUM severity). The EPSS model estimates a 2.21% probability of exploitation in the next 30 days.

How do I fix CVE-2020-36158?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2020-36158?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST