{"schema_version": "1.7.0", "id": "RLSA-2026:85276", "modified": "2026-10-21T12:11:53.565850Z", "published": "2026-10-21T12:08:03.045090Z", "upstream": ["CVE-2026-58374"], "summary": "Moderate: hostapd security update", "details": "hostapd is a user space daemon for access point and authentication servers. It implements IEEE 802.11 access point management, IEEE 802.1X/WPA/WPA2/EAP Authenticators and RADIUS authentication server.  hostapd is designed to be a \"daemon\" program that runs in the back-ground and acts as the backend component controlling authentication. hostapd supports separate frontend programs and an example text-based frontend, hostapd_cli, is included with hostapd.\n\nSecurity Fix(es):\n\n* hostapd: hostapd: Denial of Service via malformed Wi-Fi 7 Multi-Link Operation association request (CVE-2026-58374)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "severity": [{"type": "CVSS_V3", "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H"}], "affected": [{"package": {"ecosystem": "Rocky Linux:10", "name": "hostapd", "purl": "pkg:rpm/rocky-linux/hostapd?distro=rocky-linux-10&epoch=0"}, "ranges": [{"type": "ECOSYSTEM", "events": [{"introduced": "0"}, {"fixed": "0:2.11-3.el10_2"}], "database_specific": {"yum_repository": "AppStream"}}]}], "references": [{"type": "ADVISORY", "url": "https://errata.rockylinux.org/RLSA-2026:85276"}, {"type": "REPORT", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494924"}, {"type": "ADVISORY", "url": "https://access.redhat.com/errata/RHSA-2026:85276"}], "credits": [{"name": "Rocky Enterprise Software Foundation"}, {"name": "Red Hat"}], "database_specific": {"license": "CC-BY-4.0", "license_url": "https://creativecommons.org/licenses/by/4.0/", "source_advisory": "RHSA-2026:85276"}}