[ALSA-2026:85277] Moderate: hostapd security update
Type:
security
Severity:
moderate
Release date:
2026-10-21
Description:
hostapd is a user space daemon for access point and authentication servers. It implements IEEE 802.11 access point management, IEEE 802.1X/WPA/WPA2/EAP Authenticators and RADIUS authentication server. hostapd is designed to be a "daemon" program that runs in the back-ground and acts as the backend component controlling authentication. hostapd supports separate frontend programs and an example text-based frontend, hostapd_cli, is included with hostapd. Security Fix(es): * hostapd: hostapd: Denial of Service via malformed Wi-Fi 7 Multi-Link Operation association request (CVE-2026-58374) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 hostapd-2.11-3.el9_8.aarch64.rpm 99195adbba53740157d2917d57eb2583d88bd18932a7c51215cc43be728023f3
ppc64le hostapd-2.11-3.el9_8.ppc64le.rpm 1ca708c743982723ff217052ac641ceaf383c1995a2305b3e7dc25cf83a5dd69
s390x hostapd-2.11-3.el9_8.s390x.rpm 3fb7c2e0fa4ba20cd3c2b88fae2c92d914e0ffb6a730b5a997d7abedd176750e
x86_64 hostapd-2.11-3.el9_8.x86_64.rpm 85547af8610099574097054cc5ca61c61f013740ffe364d1155de93c0a88ad5a
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.