Skip to content
OpenAdvisories
Medium ELSA-2026-85276 1 CVE

Moderate: hostapd security update (Oracle Linux 10)

Published Oct 19, 2026 · Updated Oct 19, 2026

Summary

[2.11-3]
- Fix OOB memory access in Multi-Link Operation element parsing
Resolves: RHEL-194049

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 10 hostapd 0:2.11-3.el10_2

Vulnerabilities 1

  • Medium 6.5

    In hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 (IEEE 802.11be) Multi-Link Operation (MLO) associatio…