Every CVE Search/ Get API key

CVE-2025-24912

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi...

3.7 LowFix available

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
Low

Exploit likelihood

0.78%Up 0.7 points since Mar 12, 2025
90%50%10%1%

What each source reports

CVE List Score used 3.7

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.

Record
CVE-2025-24912
CVSS 3.0
3.7 LowCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-826
Updated
2026-11-02
EUVDEUVD-2025-7660 3.7

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.

Record
EUVD-2025-7660
CVSS 3.0
3.7 LowCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
GitHub AdvisoriesGHSA-97x4-g54c-4pvm 3.7

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi...

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.

Record
GHSA-97x4-g54c-4pvm
CVSS 3.0
3.7 LowCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-826
Updated
2026-11-02
NVD 3.7

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.

Record
CVE-2025-24912
CVSS 3.0
3.7 LowCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-826
Updated
2026-11-02
OSV 3.7

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.

Record
CVE-2025-24912
CVSS 3.0
3.7 LowCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness
CWE-826
Updated
2026-11-02
OSVOESA-2026-1438 3.7

wpa_supplicant security update

wpa_supplicant is a WPA Supplicant for Linux, BSD, Mac OS X, and Windows with support for WPA and WPA2 (IEEE 802.11i / RSN). It is suitable for both desktop/laptop computers and embedded systems. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11 authentication/association of the wlan driver.

Security Fix(es):

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.(CVE-2025-24912)

Record
OESA-2026-1438
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
Show 18 moreShow less
OSVOESA-2026-1439 3.7

wpa_supplicant security update

wpa_supplicant is a WPA Supplicant for Linux, BSD, Mac OS X, and Windows with support for WPA and WPA2 (IEEE 802.11i / RSN). It is suitable for both desktop/laptop computers and embedded systems. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11 authentication/association of the wlan driver.

Security Fix(es):

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.(CVE-2025-24912)

Record
OESA-2026-1439
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVOESA-2026-3177 3.7

wpa_supplicant security update

wpa_supplicant is a WPA Supplicant for Linux, BSD, Mac OS X, and Windows with support for WPA and WPA2 (IEEE 802.11i / RSN). It is suitable for both desktop/laptop computers and embedded systems. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11 authentication/association of the wlan driver.

Security Fix(es):

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.(CVE-2025-24912)

Record
OESA-2026-3177
CVSS 3.1
3.7 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Updated
2026-11-02
OSVAZL-58604 No score

CVE-2025-24912 affecting package wpa_supplicant for versions less than 2.10-3

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.

Record
AZL-58604
Updated
2026-11-02
OSVAZL-58610 No score

CVE-2025-24912 affecting package wpa_supplicant for versions less than 2.10-3

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.

Record
AZL-58610
Updated
2026-11-02
OSVCLSA-2026-1786108949 No score

hostapd: Fix of CVE-2025-24912

  • CVE-2025-24912: drop pending RADIUS request only when accepting the response
Record
CLSA-2026-1786108949
Updated
2026-11-02
OSVCLSA-2026-1790066310 No score

hostapd: Fix of CVE-2025-24912

  • CVE-2025-24912: drop a pending RADIUS request from the retransmit list only after a handler has accepted the response, so an injected response with a matching identifier cannot cancel a legitimate pending request
Record
CLSA-2026-1790066310
Updated
2026-11-02
OSVMGASA-2025-0113 No score

Updated wpa_supplicant & hostapd packages fix security vulnerability

hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail. (CVE-2025-24912)

Record
MGASA-2025-0113
Updated
2026-11-02
OSVopenSUSE-SU-2025:14890-1 No score

hostapd-2.11-2.1 on GA media

These are all security issues fixed in the hostapd-2.11-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:14890-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:14899-1 No score

wpa_supplicant-2.11-4.1 on GA media

These are all security issues fixed in the wpa_supplicant-2.11-4.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:14899-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:20985-1 No score

Security update for hostapd

This update for hostapd fixes the following issues:

Changes in hostapd:

  • bsc#1268083 - hostapd segmentation fault during fast restart cycles.
  • CVE-2025-24912: hostapd fails to process crafted RADIUS packets properly (bsc#1239461)
Record
openSUSE-SU-2026:20985-1
Updated
2026-11-02
OSVSUSE-SU-2025:0977-1 No score

Security update for wpa_supplicant

This update for wpa_supplicant fixes the following issues:

  • CVE-2025-24912: Fixed hostapd failing to process crafted RADIUS packets properly (bsc#1239461)
Record
SUSE-SU-2025:0977-1
Updated
2026-11-02
OSVSUSE-SU-2026:23038-1 No score

Security update for wpa_supplicant

This update for wpa_supplicant fixes the following issue:

  • CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS server to inject crafted RADIUS packets and force RADIUS authentications to fail (bsc#1239461).
Record
SUSE-SU-2026:23038-1
Updated
2026-11-02
OSVSUSE-SU-2026:23072-1 No score

Security update for wpa_supplicant

This update for wpa_supplicant fixes the following issues:

Security issues fixed:

  • CVE-2025-24912: RADIUS pending request dropping (bsc#1239461).
  • CVE-2026-58374: missing bounds check in AP-mode Wi-Fi 7 (IEEE 802.11be) MLO association request processing allows an unauthenticated user to send a crafted management frame and cause an out-of-bounds write (bsc#1269892).
  • Missing network context validation for PMKSA caching https://w1.fi/security/2026-2/.
  • Unexpected SAE commit message contents terminating wpa_supplicant https://w1.fi/security/2026-3/.

Other updates and bugfixes:

  • Revert "Mark authorization completed on driver indication during 4-way HS offload" because of WPA2-PSK/WPA-SAE connection problems with brcmfmac wifi hardware (bsc#1230797).
Record
SUSE-SU-2026:23072-1
Updated
2026-11-02
OSVSUSE-SU-2026:3103-1 No score

Security update for wpa_supplicant

This update for wpa_supplicant fixes the following issues:

  • CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS server to inject crafted RADIUS packets and force RADIUS authentications to fail (bsc#1239461).
  • CVE-2026-58374: missing bounds check in AP-mode Wi-Fi 7 (IEEE 802.11be) MLO association request processing allows an unauthenticated user to send a crafted management frame and cause an out-of-bounds write (bsc#1269892).
  • Missing network context validation for PMKSA caching https://w1.fi/security/2026-2/
  • Unexpected SAE commit message contents terminating wpa_supplicant https://w1.fi/security/2026-3/
Record
SUSE-SU-2026:3103-1
Updated
2026-11-02
OSVSUSE-SU-2026:3159-1 No score

Security update for wpa_supplicant

This update for wpa_supplicant fixes the following issue:

  • CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS server to inject crafted RADIUS packets and force RADIUS authentications to fail (bsc#1239461).
Record
SUSE-SU-2026:3159-1
Updated
2026-11-02
OSVSUSE-SU-2026:3281-1 No score

Security update for wpa_supplicant

This update for wpa_supplicant fixes the following issues

  • CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS server to inject crafted RADIUS packets and force RADIUS authentications to fail (bsc#1239461).
  • Missing network context validation for PMKSA caching https://w1.fi/security/2026-2/.
Record
SUSE-SU-2026:3281-1
Updated
2026-11-02
OSVSUSE-SU-2026:3490-1 No score

Security update for wpa_supplicant

This update for wpa_supplicant fixes the following issues:

  • CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS server to inject crafted RADIUS packets and force RADIUS authentications to fail (bsc#1239461).
  • Missing network context validation for PMKSA caching https://w1.fi/security/2026-2/
  • Unexpected SAE commit message contents terminating wpa_supplicant https://w1.fi/security/2026-3/
Record
SUSE-SU-2026:3490-1
Updated
2026-11-02
OSVSUSE-SU-2026:4492-1 No score

Security update for wpa_supplicant

This update for wpa_supplicant fixes the following issues:

  • CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security bypasses (bsc#1280914).
Record
SUSE-SU-2026:4492-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
wpa_supplicant
Azure Linux:3
 before 2.10-3
2.10-3
wpa_supplicant
Azure Linux:2
 before 2.10-3
2.10-3
hostapd
TuxCare:AlmaLinux:9.2
 before 2.10-1.el9.tuxcare.els2
2.10-1.el9.tuxcare.els2
hostapd-logwatch
TuxCare:AlmaLinux:9.2
 before 2.10-1.el9.tuxcare.els2
2.10-1.el9.tuxcare.els2
hostapd
TuxCare:AlmaLinux:9.6
 before 2.11-2.el9.tuxcare.els2
2.11-2.el9.tuxcare.els2
hostapd-logwatch
TuxCare:AlmaLinux:9.6
 before 2.11-2.el9.tuxcare.els2
2.11-2.el9.tuxcare.els2
hostapd
Mageia:9
 before 2.11-1.1.mga9
2.11-1.1.mga9
wpa_supplicant
Mageia:9
 before 2.11-1.1.mga9
2.11-1.1.mga9
wpa_supplicant
openEuler:22.03-LTS-SP4
 before 2.6-33.oe2203sp4
2.6-33.oe2203sp4
wpa_supplicant
openEuler:24.03-LTS
 before 2.10-8.oe2403
2.10-8.oe2403
Show 15 moreShow less
Affected packages
PackageAffectedFixed
wpa_supplicant
openEuler:24.03-LTS-SP1
 before 2.11-8.oe2403sp1
2.11-8.oe2403sp1
wpa_supplicant
SUSE:Linux Enterprise Module for Basesystem 15 SP6
 before 2.10-150600.7.6.1
2.10-150600.7.6.1
wpa_supplicant
openSUSE:Leap 15.6
 before 2.10-150600.7.6.1
2.10-150600.7.6.1
wpa_supplicant
SUSE:Linux Micro 6.0
 before 2.10-6.1
2.10-6.1
wpa_supplicant
SUSE:Linux Micro 6.1
From an advisory covering 2 CVEs
 before 2.11-slfo.1.1_2.1
2.11-slfo.1.1_2.1
wpa_supplicant
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 2 CVEs
 before 2.11-150700.3.3.1
2.11-150700.3.3.1
wpa_supplicant
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
 before 2.9-23.23.1
2.9-23.23.1
wpa_supplicant
SUSE:Linux Enterprise Micro 5.3
 before 2.9-150000.4.42.1
2.9-150000.4.42.1
wpa_supplicant
SUSE:Linux Enterprise Micro 5.4
 before 2.9-150000.4.42.1
2.9-150000.4.42.1
wpa_supplicant
SUSE:Linux Enterprise Micro 5.5
 before 2.10-150500.3.6.1
2.10-150500.3.6.1
wpa_supplicant
SUSE:Linux Enterprise Server 15 SP6-LTSS
From an advisory covering 2 CVEs
 before 2.10-150600.7.11.1
2.10-150600.7.11.1
wpa_supplicant
SUSE:Linux Enterprise Server for SAP Applications 15 SP6
From an advisory covering 2 CVEs
 before 2.10-150600.7.11.1
2.10-150600.7.11.1
hostapd
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 2.11-2.1
2.11-2.1
wpa_supplicant
openSUSE:Tumbleweed
 before 2.11-4.1
2.11-4.1
hostapd
openSUSE:Leap 16.0
 before 2.11-bp160.2.1
2.11-bp160.2.1

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-24912 is a low vulnerability (CVSS 3.7) in Jouni Malinen Hostapd, published March 12, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.78%, the 55th percentile. Fixed in wpa_supplicant 2.10-3.

References

Show 26 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open