[Git][security-tracker-team/security-tracker][master] Add new wpa issue

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3ae74479 by Salvatore Bonaccorso at 2026-09-25T23:36:26+02:00
Add new wpa issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -365642,6 +365642,16 @@ CVE-2024-23456 (Anti-tampering can be disabled under certain conditions without
 	NOT-FOR-US: Zscaler
 CVE-2023-40819 (ID4Portais in version < V.2022.837.002a returns message parameter unsa ...)
 	NOT-FOR-US: ID4Portais
+CVE-2026-XXXX [wpa_config_write() follows symlinks (no O_NOFOLLOW) -> arbitrary root file overwrite by a netdev-group user]
+	- wpa <unfixed> (bug #1148985)
+	NOTE: https://bugs.launchpad.net/ubuntu/+source/wpa/+bug/2163513
+	NOTE: https://git.w1.fi/cgit/hostap/commit/?id=e3d1ebda8117c455547b8a9fb06460fb6a405373
+	NOTE: https://git.w1.fi/cgit/hostap/commit/?id=1037cc3678ef316ec65059897a941ac3bcfb44bb
+	NOTE: https://git.w1.fi/cgit/hostap/commit/?id=c53b2ce62ee11f0d5d95177feeb031196a5ccd25
+	NOTE: https://git.w1.fi/cgit/hostap/commit/?id=b35d7d48bb646eda965fc4aa7cee750eacd87687
+	NOTE: https://git.w1.fi/cgit/hostap/commit/?id=4540af010df3f4d02240757fb0cbff29339a12c3
+	NOTE: https://git.w1.fi/cgit/hostap/commit/?id=e3937427e702f2efd45b2bd3cdc3e8591c3280e4
+	NOTE: https://git.w1.fi/cgit/hostap/commit/?id=50e7efc698f9211717f484614e04f42e4f4f7878
 CVE-2024-5290 (An issue was discovered in Ubuntu wpa_supplicant that resulted in load ...)
 	{DSA-5739-1}
 	- wpa 2:2.10-22



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3ae7447904ece66fe0329ac9c68f433010026872

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3ae7447904ece66fe0329ac9c68f433010026872
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260925/731d420e/attachment.htm>