Description

A flaw was found in hostapd. An unauthenticated attacker within wireless range can send a specially crafted management frame during Wi-Fi 7 (IEEE 802.11be) Multi-Link Operation (MLO) association request processing. This crafted frame, containing a malformed Multi-Link Element or Per-STA Profile subelement, can lead to an out-of-bounds write and memory corruption. The primary consequence of this vulnerability is a denial of service (DoS) due to the termination of the hostapd process.

Mitigation

Aliases