ALBA-2021:2576 NetworkManager bug fix and enhancement update

Not scored Published

Bug fixes for NetworkManager address issues with connection removal, bonding, and traffic control, potentially preventing network disruptions.

Exploited in the wild
Not known
Login needed
Not stated
Attackable
Not stated
Victim action needed
Not stated
Fix
Available

What is ALBA-2021:2576?

ALBA-2021:2576 is a vulnerability in NetworkManager-libnm-devel, published on 29 Jun 2021.

Official description

NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services.

Bug Fix(es) and Enhancement(s):

  • [NMCI] Automatic connection not removed when veth device gets removed (BZ#1965336)

  • [SNO][assisted-operator][nmstate] Bond Interface is down when booting from the discovery ISO (BZ#1965337)

  • NetworkManager doesn't honour tlb_dynamic_lb=0 when creating a bonding device with mode=balance-alb (BZ#1965948)

  • Provide a way to ignore existing TC qdiscs and filters (BZ#1972566)

Which versions are affected by ALBA-2021:2576?

Linux distribution packages (1)
NetworkManager-libnm-devel AlmaLinux:8All versions1:1.30.0-9.el8_4

How do I fix ALBA-2021:2576?

Apply the vendor's patch.

Is ALBA-2021:2576 being exploited?

There is no known exploitation of ALBA-2021:2576 in the wild and no public exploit code.

Sources

Is ALBA-2021:2576 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free