CVE-2026-98958

A flaw was found in the Linux kernel's mt76 wireless driver. When handling connections that use Multi-Link Operation MLO, transmission completions can be reported on a different wireless link than the one where packets were initially queued, causing packet accounting counters to drift upward...

MiracleLinux 9 : hostapd-2.11-3.el9_8 (AXSA:2026-2121:01)

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-2121:01 advisory. hostapd: hostapd: Denial of Service via malformed Wi-Fi 7 Multi-Link Operation association request CVE-2026-58374 Tenable has extracted the preceding...

Rocky Linux 10.2 [CIQ] Security Update: hostapd / hostapd-debuginfo / hostapd-debugsource (crlsa-2026_85276)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202685276 advisory. hostapd: hostapd: Denial of Service via malformed Wi-Fi 7 Multi-Link Operation association request CVE-2026-58374 Tenable has extracted the preceding descriptio...

Rocky Linux 9 [CIQ] Security Update: hostapd / hostapd-debuginfo / hostapd-debugsource (crlsa-2026_85277)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202685277 advisory. hostapd: hostapd: Denial of Service via malformed Wi-Fi 7 Multi-Link Operation association request CVE-2026-58374 Tenable has extracted the preceding description...

hostapd security update

An update is available for hostapd. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list hostapd is a user space daemon for access point and authentication servers. ...

RLSA-2026:85276 Moderate: hostapd security update

hostapd is a user space daemon for access point and authentication servers. It implements IEEE 802.11 access point management, IEEE 802.1X/WPA/WPA2/EAP Authenticators and RADIUS authentication server. hostapd is designed to be a "daemon" program that runs in the back-ground and acts as the backen...

hostapd security update

An update is available for hostapd. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list hostapd is a user space daemon for access point and authentication servers. I...

RLSA-2026:85277 Moderate: hostapd security update

hostapd is a user space daemon for access point and authentication servers. It implements IEEE 802.11 access point management, IEEE 802.1X/WPA/WPA2/EAP Authenticators and RADIUS authentication server. hostapd is designed to be a "daemon" program that runs in the back-ground and acts as the backen...

AlmaLinux 10 : hostapd (ALSA-2026:85276)

The remote AlmaLinux 10 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:85276 advisory. hostapd: hostapd: Denial of Service via malformed Wi-Fi 7 Multi-Link Operation association request CVE-2026-58374 Tenable has extracted the preceding description...

RockyLinux 10 : hostapd (RLSA-2026:85276)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:85276 advisory. hostapd: hostapd: Denial of Service via malformed Wi-Fi 7 Multi-Link Operation association request CVE-2026-58374 Tenable has extracted the preceding descriptio...

AlmaLinux 9 : hostapd (ALSA-2026:85277)

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:85277 advisory. hostapd: hostapd: Denial of Service via malformed Wi-Fi 7 Multi-Link Operation association request CVE-2026-58374 Tenable has extracted the preceding description...

RockyLinux 9 : hostapd (RLSA-2026:85277)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:85277 advisory. hostapd: hostapd: Denial of Service via malformed Wi-Fi 7 Multi-Link Operation association request CVE-2026-58374 Tenable has extracted the preceding description...

CVE-2026-90375

A flaw was found in the Wi-Fi mt76 driver of the Linux kernel. This vulnerability arises from incorrect accounting of non-AQL Atheros Quality of Service packets for Multi-Link Operation MLO stations. Specifically, the mt76txqueueskb function can misattribute packet counts, leading to an inflated...

Oracle Linux 9 : hostapd (ELSA-2026-85277)

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-85277 advisory. 2.11-3 - Fix OOB memory access in Multi-Link Operation element parsing Resolves: RHEL-194042 Tenable has extracted the preceding description block directly fro...

Oracle Linux 10 : hostapd (ELSA-2026-85276)

The remote Oracle Linux 10 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-85276 advisory. 2.11-3 - Fix OOB memory access in Multi-Link Operation element parsing Resolves: RHEL-194049 Tenable has extracted the preceding description block directly fr...

Moderate: Red Hat Security Advisory: hostapd security update

An update for hostapd is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

hostapd: hostapd: Denial of Service via malformed Wi-Fi 7 Multi-Link Operation association request

A flaw was found in hostapd. An unauthenticated attacker within wireless range can send a specially crafted management frame during Wi-Fi 7 IEEE 802.11be Multi-Link Operation MLO association request processing. This crafted frame, containing a malformed Multi-Link Element or Per-STA Profile...

Moderate: Red Hat Security Advisory: hostapd security update

An update for hostapd is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

hostapd: hostapd: Denial of Service via malformed Wi-Fi 7 Multi-Link Operation association request

A flaw was found in hostapd. An unauthenticated attacker within wireless range can send a specially crafted management frame during Wi-Fi 7 IEEE 802.11be Multi-Link Operation MLO association request processing. This crafted frame, containing a malformed Multi-Link Element or Per-STA Profile...

ALSA-2026:85276 Moderate: hostapd security update

hostapd is a user space daemon for access point and authentication servers. It implements IEEE 802.11 access point management, IEEE 802.1X/WPA/WPA2/EAP Authenticators and RADIUS authentication server. hostapd is designed to be a "daemon" program that runs in the back-ground and acts as the backen...