Vulnerability Spotlight: Denial-of-service vulnerabilities in Linux kernel, W1.fi
Summary: Cisco Talos discovered two denial-of-service vulnerabilities in the open-source program W1.fi, both targeting hostapd, one allowing an attacker to forge authentication requests and another to trigger a deauthentication. TALOS-2019-0849 relates to TALOS-2019-0900, a denial-of-service vulnerability in the Linux kernel prior to mainline 5.3, and both W1.fi and Linux have released updates to address the issues.
Why it matters: An attacker can forge Authentication and Association Request packets to make an access point send IAPP location updates before authentication completes, causing CAM table attacks or traffic flapping across nearby APs in the same wireless infrastructure.
Read the original at Cisco Talos ↗
- Topics
- Endpoint & Network Security
- Mentions
- CVE-2019-5062CVE-2019-5108
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026