PT-2025-10995 · Hostap+1 · Hostapd+1

Kusaba Takeshi · Published 2025-03-12 · Updated 2026-02-28 · CVE-2025-24912

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions: hostapd (affected versions not specified)

Description: The issue arises when hostapd authenticates wi-fi devices using RADIUS authentication. An attacker positioned between hostapd and the RADIUS server can inject crafted RADIUS packets, causing RADIUS authentications to fail.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-826

Related Identifiers

AZL-58604

AZL-58610

CVE-2025-24912

MGASA-2025-0113

OESA-2026-1438

OESA-2026-1439

OPENSUSE-SU-2025:14890-1

OPENSUSE-SU-2025:14899-1

OPENSUSE-SU-2025_0977-1

SUSE-SU-2025:0977-1

SUSE-SU-2025_0977-1

Affected Products

Suse

Hostapd

References · 29

• https://osv.dev/vulnerability/SUSE-SU-2025:0977-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:14899-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-58604 · Vendor Advisory
• https://w1.fi/cgit/hostap/commit/?id=726432d7622cc0088ac353d073b59628b590ea44 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-24912 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:14890-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1439 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-24912 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0113.html · Security Note
• https://osv.dev/vulnerability/CVE-2025-24912 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-24912 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-58610 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1438 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-24912 · Security Note
• https://osv.dev/vulnerability/MGASA-2025-0113 · Vendor Advisory