AZL-103386

See a problem?
Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-103386.json
JSON Data
https://api.osv.dev/v1/vulns/AZL-103386
Upstream
  • CVE-2026-78807
Published
2026-09-11T18:16:58Z
Modified
2026-09-23T05:36:13Z
Summary
CVE-2026-78807 affecting package wpa_supplicant 2.10-3
Details

An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA caching via missing validation in the driver based PMKSA selection path in wpa.c

References

Affected packages

Azure Linux:3 / wpa_supplicant

Package

Name
wpa_supplicant
Purl
pkg:rpm/azure-linux/wpa_supplicant

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Last Affected
2.10-3

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-103386.json"