Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issue: - CVE-2026-78807: Security bypass via missing PMKSA validation (bsc#1280914).
- Update to 2.11-slfo.1.1_3.1
Published Updated
PatchFirst · Latest vulnerabilities
wpa_supplicant vulnerabilities
Vulnerability published for wpa_supplicant in the last 30 days: 1. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
Security update for wpa_supplicant
This update for wpa_supplicant fixes the following issues: Security issues fixed: - CVE-2025-24912: RADIUS pending request dropping (bsc#1239461). - CVE-2026-58374: missing bounds check in AP-mode Wi-Fi 7 (IEEE 802.11be) MLO association request processing allows an unauthenticated user to send a crafted management frame and cause an out-of-bounds write (bsc#1269892). - Missing network context validation for PMKSA caching https://w1.fi/security/2026-2/. - Unexpected SAE commit message contents terminating `wpa_supplicant` https://w1.fi/security/2026-3/. Other updates and bugfixes: - Revert "Mark authorization completed on driver indicati
- Update to 2.11-slfo.1.1_2.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.