[PATCH] EAPOL auth: Clear reAuthenticate flag when entering AUTHENTICATED state

Jouni Malinen j at w1.fi
Mon Jul 27 06:08:37 PDT 2026


On Tue, Jun 16, 2026 at 05:01:36PM +0200, Remi Pommarel wrote:
> When a station reassociates before the EAP state machine reaches
> AUTHENTICATED state (e.g., due to delayed response to the first
> Association Request), the reAuthenticate flag may be set (see
> ieee802_1x_new_station()).
> 
> Since reAuthenticate is only processed after reaching AUTHENTICATED
> state, this would cause a AUTH_PAE state machine to be reset and send a
> EAP identity request even though the station has already completed EAP
> successfully. This is ignored by the station and the 4-way handshake
> does not happen.
> 
> Clear the reAuthenticate flag when transitioning to AUTHENTICATED
> state to ensure any pending re-authentication request from before
> authentication completed is discarded.

Thanks, applied.
 
-- 
Jouni Malinen                                            PGP id EFC895FA



More information about the Hostap mailing list