Moderate Vulnerability in hostapd: Denial of Service via Malformed Wi-Fi 7 Association Request
Summary
RLSA-2026:85277: Moderate: hostapd security update. Affects hostapd versions < 0:2.11-3.el9_8. Fixed in 0:2.11-3.el9_8. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
hostapd is a user space daemon designed for managing access points and authentication servers. It implements IEEE 802.11 access point management, IEEE 802.1X/WPA/WPA2/EAP Authenticators, and RADIUS authentication server functionalities. As a daemon, it operates in the background, controlling authentication processes and supporting various frontend programs, including a text-based frontend called hostapd_cli. This package is crucial for network security and management, making it essential to address any vulnerabilities that may arise.
Vulnerability Detail
The vulnerability identified as CVE-2026-58374 allows for a Denial of Service (DoS) attack through a malformed Wi-Fi 7 Multi-Link Operation association request. This issue can lead to service disruptions, affecting the availability of the hostapd service. Attackers can exploit this vulnerability to crash the hostapd daemon, resulting in a loss of network access for legitimate users. The technical aspect of this vulnerability lies in the improper handling of specific association requests, which can overwhelm the service.
How To Fix
Minimum fixed version
0:2.11-3.el9_8
This is the first release that contains the fix.
sudo dnf update hostapdTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you may consider disabling the Wi-Fi 7 Multi-Link Operation feature if it is not essential for your network operations. This can help mitigate the risk of exploitation until the package is updated.
Conclusion
The identified vulnerability in hostapd poses a significant risk of Denial of Service attacks through malformed association requests. It is crucial to update the package to the latest version to mitigate this risk. Users should also consider temporary workarounds while awaiting updates.
See every vulnerability recorded for hostapd →
FAQ
hostapd is a user space daemon that manages access points and authentication servers, implementing various wireless networking standards.
CVE-2026-58374 refers to a specific vulnerability in hostapd that allows for Denial of Service attacks through malformed Wi-Fi 7 association requests.
You can use Vulert, which monitors open-source vulnerabilities in your software. By uploading your package-lock.json file, you can check for vulnerabilities in real-time.
The CVSS score for this vulnerability is 7.1, indicating a moderate severity level.
If an immediate update is not possible, consider disabling the Wi-Fi 7 Multi-Link Operation feature as a temporary workaround to reduce the risk of exploitation.
Related vulnerabilities
Recent vulnerabilities recorded for hostapd.
