[CLSA-2026:1790066310] hostapd: Fix of CVE-2025-24912
Type:
security
Severity:
Low
Release date:
2026-09-22 08:38:42 UTC
Description:
- CVE-2025-24912: drop a pending RADIUS request from the retransmit list only after a handler has accepted the response, so an injected response with a matching identifier cannot cancel a legitimate pending request
CVEs fixed:
Updated packages:
  • hostapd-2.11-2.el9.tuxcare.els2.x86_64.rpm
    sha:9415c6673e82ac89384e642539d2998332c0aebf55833b917128534b30b6644a
  • hostapd-logwatch-2.11-2.el9.tuxcare.els2.x86_64.rpm
    sha:a60084a780b29b376e99334899c25190c8f9de10022ed9b2d7ee15be57e76bfc
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.