{"id":"CVE-2025-24912","aliases":["AZL-58604","AZL-58610","CLSA-2026-1786108949","CLSA-2026-1790066310","EUVD-2025-7660","GHSA-97x4-g54c-4pvm","MGASA-2025-0113","OESA-2026-1438","OESA-2026-1439","OESA-2026-3177","SUSE-SU-2025:0977-1","SUSE-SU-2026:23038-1","SUSE-SU-2026:23072-1","SUSE-SU-2026:3103-1","SUSE-SU-2026:3159-1","SUSE-SU-2026:3281-1","SUSE-SU-2026:3490-1","SUSE-SU-2026:4492-1","openSUSE-SU-2025:14890-1","openSUSE-SU-2025:14899-1","openSUSE-SU-2026:20985-1"],"status":"published","title":"hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi...","description":"hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.","severity":{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00775,"percentile":0.56084,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-826"],"published":"2025-03-12T04:43:54Z","modified":"2026-10-31T15:02:25Z","fixes":[{"ecosystem":"Azure Linux:3","package":"wpa_supplicant","fixed_in":["2.10-3"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"wpa_supplicant","fixed_in":["2.10-3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"hostapd","fixed_in":["2.10-1.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"hostapd-logwatch","fixed_in":["2.10-1.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"hostapd","fixed_in":["2.11-2.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.6","package":"hostapd-logwatch","fixed_in":["2.11-2.el9.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"hostapd","fixed_in":["2.11-1.1.mga9"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"wpa_supplicant","fixed_in":["2.11-1.1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"wpa_supplicant","fixed_in":["2.6-33.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"wpa_supplicant","fixed_in":["2.10-8.oe2403"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"wpa_supplicant","fixed_in":["2.11-8.oe2403sp1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"wpa_supplicant","fixed_in":["2.10-150600.7.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6","package":"wpa_supplicant","fixed_in":["2.10-150600.7.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Micro 6.0","package":"wpa_supplicant","fixed_in":["2.10-6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"wpa_supplicant","fixed_in":["2.9-23.23.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"wpa_supplicant","fixed_in":["2.9-150000.4.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"wpa_supplicant","fixed_in":["2.9-150000.4.42.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"wpa_supplicant","fixed_in":["2.10-150500.3.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"wpa_supplicant","fixed_in":["2.11-4.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 16.0","package":"hostapd","fixed_in":["2.11-bp160.2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-3"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"hostapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-1.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"hostapd-logwatch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-1.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"hostapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11-2.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.6","package":"hostapd-logwatch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11-2.el9.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"hostapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11-1.1.mga9"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11-1.1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6-33.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-8.oe2403"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11-8.oe2403sp1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150600.7.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150600.7.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.0","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Micro 6.1","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11-slfo.1.1_2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP7","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11-150700.3.3.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-23.23.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-150000.4.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9-150000.4.42.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150500.3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP6-LTSS","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150600.7.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP6","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-150600.7.11.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"hostapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11-2.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"wpa_supplicant","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11-4.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 16.0","package":"hostapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.11-bp160.2.1"}]}]}],"products":[{"vendor":"jouni malinen","product":"hostapd"},{"vendor":"w1.fi","product":"hostapd"}],"references":[{"url":"https://w1.fi/hostapd/","tags":["Product","web"]},{"url":"https://w1.fi/cgit/hostap/commit/?id=726432d7622cc0088ac353d073b59628b590ea44","tags":["Patch","web"]},{"url":"https://w1.fi/cgit/hostap/commit/?id=339a334551ca911187cc870f4f97ef08e11db109","tags":["Patch","web"]},{"url":"https://jvn.jp/en/jp/JVN19358384/","tags":["Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24912","tags":["web","advisory"]},{"url":"https://jvn.jp/en/jp/JVN19358384"},{"url":"https://w1.fi/hostapd"},{"url":"https://github.com/advisories/GHSA-97x4-g54c-4pvm"},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1786108949.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1790066310.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/24xxx/CVE-2025-24912.json","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0113.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34117","tags":["report"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1438","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1439","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3177","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-20250977-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1239461","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24912","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623038-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-202623072-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1230797","tags":["report"]},{"url":"https://bugzilla.suse.com/1269892","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-58374","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263103-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263159-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263281-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20263490-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2026/suse-su-20264492-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1280914","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2026-78807","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52424","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/AKJ5RJUGPLMQGVVTYXAB2ZAUDYSCVDB6/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1268083","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2025-24912","description":"hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.","status":"published","published":"2025-03-12T04:43:54.87Z","modified":"2025-03-12T13:21:59.254Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"cna"}],"cwes":["CWE-826"],"updated_at":"2026-11-02T14:32:43.770144Z"}],"euvd":[{"id":"EUVD-2025-7660","description":"hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.","status":"published","published":"2025-03-12T04:43:54Z","modified":"2025-03-12T13:21:59Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T20:53:06.845495Z"}],"ghsa":[{"id":"GHSA-97x4-g54c-4pvm","title":"hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi...","description":"hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.","status":"published","published":"2025-03-12T06:32:42Z","modified":"2025-03-12T06:32:47Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-826"],"updated_at":"2026-11-02T15:00:15.034834Z"}],"nvd":[{"id":"CVE-2025-24912","description":"hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.","status":"published","published":"2025-03-12T05:15:37.43Z","modified":"2026-06-17T08:59:50.027Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low","assessor":"secondary"}],"cwes":["CWE-826"],"updated_at":"2026-11-02T14:10:53.93104Z"}],"osv":[{"id":"CVE-2025-24912","description":"hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.","status":"published","published":"2025-03-12T04:43:54.87Z","modified":"2026-10-28T02:30:29.705915809Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"cwes":["CWE-826"],"updated_at":"2026-11-02T15:44:47.386092Z"},{"id":"OESA-2026-1438","title":"wpa_supplicant security update","description":"wpa_supplicant is a WPA Supplicant for Linux, BSD, Mac OS X, and Windows with support for WPA and WPA2 (IEEE 802.11i / RSN). It is suitable for both desktop/laptop computers and embedded systems. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11 authentication/association of the wlan driver.\r\n\r\nSecurity Fix(es):\n\nhostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.(CVE-2025-24912)","status":"published","published":"2026-02-28T11:10:27Z","modified":"2026-08-18T01:19:34.306894912Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-1439","title":"wpa_supplicant security update","description":"wpa_supplicant is a WPA Supplicant for Linux, BSD, Mac OS X, and Windows with support for WPA and WPA2 (IEEE 802.11i / RSN). It is suitable for both desktop/laptop computers and embedded systems. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11 authentication/association of the wlan driver.\r\n\r\nSecurity Fix(es):\n\nhostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.(CVE-2025-24912)","status":"published","published":"2026-02-28T11:10:27Z","modified":"2026-08-18T01:19:34.567435208Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:45.721983Z"},{"id":"OESA-2026-3177","title":"wpa_supplicant security update","description":"wpa_supplicant is a WPA Supplicant for Linux, BSD, Mac OS X, and Windows with support for WPA and WPA2 (IEEE 802.11i / RSN). It is suitable for both desktop/laptop computers and embedded systems. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11 authentication/association of the wlan driver.\r\n\r\nSecurity Fix(es):\n\nhostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.(CVE-2025-24912)","status":"published","published":"2026-07-24T11:12:03Z","modified":"2026-08-18T01:21:24.817655946Z","cvss":[{"version":"3.1","score":3.7,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:52:46.823443Z"},{"id":"AZL-58604","title":"CVE-2025-24912 affecting package wpa_supplicant for versions less than 2.10-3","description":"hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.","status":"published","published":"2025-03-12T05:15:37Z","modified":"2026-10-31T15:02:25Z","updated_at":"2026-11-02T15:28:07.517393Z"},{"id":"AZL-58610","title":"CVE-2025-24912 affecting package wpa_supplicant for versions less than 2.10-3","description":"hostapd fails to process crafted RADIUS packets properly. When hostapd authenticates wi-fi devices with RADIUS authentication, an attacker in the position between the hostapd and the RADIUS server may inject crafted RADIUS packets and force RADIUS authentications to fail.","status":"published","published":"2025-03-12T05:15:37Z","modified":"2026-04-21T04:37:07.241355Z","updated_at":"2026-11-02T15:28:07.517393Z"},{"id":"CLSA-2026-1786108949","title":"hostapd: Fix of CVE-2025-24912","description":"- CVE-2025-24912: drop pending RADIUS request only when accepting the response","status":"published","published":"2026-08-07T13:22:41Z","modified":"2026-10-26T09:30:31.216721868Z","updated_at":"2026-11-02T15:43:46.850893Z"},{"id":"CLSA-2026-1790066310","title":"hostapd: Fix of CVE-2025-24912","description":"- CVE-2025-24912: drop a pending RADIUS request from the retransmit list only\n  after a handler has accepted the response, so an injected response with a\n  matching identifier cannot cancel a legitimate pending request","status":"published","published":"2026-09-22T08:38:42Z","modified":"2026-10-26T09:30:49.024865886Z","updated_at":"2026-11-02T15:43:48.28229Z"},{"id":"MGASA-2025-0113","title":"Updated wpa_supplicant \u0026 hostapd packages fix security vulnerability","description":"hostapd fails to process crafted RADIUS packets properly. When hostapd\nauthenticates wi-fi devices with RADIUS authentication, an attacker in\nthe position between the hostapd and the RADIUS server may inject\ncrafted RADIUS packets and force RADIUS authentications to fail.\n(CVE-2025-24912)\n","status":"published","published":"2025-03-24T17:27:22Z","modified":"2026-04-16T04:43:07.466491434Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:14890-1","title":"hostapd-2.11-2.1 on GA media","description":"These are all security issues fixed in the hostapd-2.11-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-03-13T00:00:00Z","modified":"2025-05-07T18:15:29.068038Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:14899-1","title":"wpa_supplicant-2.11-4.1 on GA media","description":"These are all security issues fixed in the wpa_supplicant-2.11-4.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-03-16T00:00:00Z","modified":"2026-02-04T02:25:03.227716Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2026:20985-1","title":"Security update for hostapd","description":"This update for hostapd fixes the following issues:\n\nChanges in hostapd:\n\n- bsc#1268083 - hostapd segmentation fault during fast restart cycles.\n- CVE-2025-24912: hostapd fails to process crafted RADIUS packets\n  properly (bsc#1239461)\n","status":"published","published":"2026-06-15T13:55:50Z","modified":"2026-06-24T18:24:21.907164424Z","updated_at":"2026-11-02T16:58:41.885092Z"},{"id":"SUSE-SU-2025:0977-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issues:\n\n- CVE-2025-24912: Fixed hostapd failing to process crafted RADIUS packets properly (bsc#1239461)\n","status":"published","published":"2025-03-21T08:25:51Z","modified":"2026-02-04T03:37:31.251627Z","updated_at":"2026-11-02T15:53:58.883365Z"},{"id":"SUSE-SU-2026:23038-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issue:\n\n- CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS\n  server to inject crafted RADIUS packets and force RADIUS authentications to fail (bsc#1239461).\n","status":"published","published":"2026-07-29T09:55:00Z","modified":"2026-08-12T18:23:38.854398623Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:23072-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2025-24912: RADIUS pending request dropping (bsc#1239461).\n- CVE-2026-58374: missing bounds check in AP-mode Wi-Fi 7 (IEEE 802.11be) MLO association request processing allows an\n  unauthenticated user to send a crafted management frame and cause an out-of-bounds write (bsc#1269892).\n- Missing network context validation for PMKSA caching https://w1.fi/security/2026-2/.\n- Unexpected SAE commit message contents terminating `wpa_supplicant` https://w1.fi/security/2026-3/.\n\nOther updates and bugfixes:\n\n- Revert \"Mark authorization completed on driver indication during 4-way HS offload\" because of WPA2-PSK/WPA-SAE\n  connection problems with brcmfmac wifi hardware (bsc#1230797).\n","status":"published","published":"2026-07-31T09:06:58Z","modified":"2026-08-14T18:23:35.611775961Z","updated_at":"2026-11-02T15:54:03.503431Z"},{"id":"SUSE-SU-2026:3103-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issues:\n\n- CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS\n  server to inject crafted RADIUS packets and force RADIUS authentications to fail (bsc#1239461).\n- CVE-2026-58374: missing bounds check in AP-mode Wi-Fi 7 (IEEE 802.11be) MLO association request processing allows an\n  unauthenticated user to send a crafted management frame and cause an out-of-bounds write (bsc#1269892).\n- Missing network context validation for PMKSA caching https://w1.fi/security/2026-2/\n- Unexpected SAE commit message contents terminating `wpa_supplicant` https://w1.fi/security/2026-3/   \n","status":"published","published":"2026-07-17T13:30:04Z","modified":"2026-07-18T08:45:09.736248269Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3159-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issue:\n\n- CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS\n  server to inject crafted RADIUS packets and force RADIUS authentications to fail (bsc#1239461).\n","status":"published","published":"2026-07-21T14:27:38Z","modified":"2026-07-22T09:30:06.095336599Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3281-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issues\n\n- CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS\n  server to inject crafted RADIUS packets and force RADIUS authentications to fail (bsc#1239461).\n- Missing network context validation for PMKSA caching https://w1.fi/security/2026-2/.\n","status":"published","published":"2026-07-27T13:40:44Z","modified":"2026-07-28T10:00:10.449970784Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:3490-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issues:\n\n- CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS\n  server to inject crafted RADIUS packets and force RADIUS authentications to fail (bsc#1239461).\n- Missing network context validation for PMKSA caching https://w1.fi/security/2026-2/\n- Unexpected SAE commit message contents terminating `wpa_supplicant` https://w1.fi/security/2026-3/   \n","status":"published","published":"2026-08-04T11:58:38Z","modified":"2026-08-04T18:30:05.195188139Z","updated_at":"2026-11-02T15:54:04.987808Z"},{"id":"SUSE-SU-2026:4492-1","title":"Security update for wpa_supplicant","description":"This update for wpa_supplicant fixes the following issues:\n\n- CVE-2026-78807: missing validation in driver-based PMKSA selection within wpa_supplicant can allow local security\n  bypasses (bsc#1280914).\n","status":"published","published":"2026-10-05T13:22:34Z","modified":"2026-10-06T11:15:10.487165831Z","updated_at":"2026-11-02T15:54:05.838224Z"}]}}