Skip to content
OpenAdvisories
Medium ELSA-2026-85277 1 CVE

Moderate: hostapd security update (Oracle Linux 9)

Published Oct 19, 2026 · Updated Oct 19, 2026

Summary

[2.11-3]
- Fix OOB memory access in Multi-Link Operation element parsing
Resolves: RHEL-194042

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 9 hostapd 0:2.11-3.el9_8

Vulnerabilities 1

  • Medium 6.5

    In hostapd before 2.12, a missing bounds check in AP-mode Wi-Fi 7 (IEEE 802.11be) Multi-Link Operation (MLO) associatio…