ALBA-2021:4061 NetworkManager bug fix and enhancement update
NetworkManager bugs cause network connectivity loss and routing issues, potentially leading to denial of service for local or adjacent users.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is ALBA-2021:4061?
ALBA-2021:4061 is a denial of service vulnerability in NetworkManager-libnm-devel, published on 2 Nov 2021. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services.
Bug Fix(es) and Enhancement(s):
IPv6 Default gateway deleted from routing table (BZ#2007264)
[nm-cloud-setup] [AWS] default route inter-feres with other subnets on the VM (making containers unreachable) (BZ#2007341)
[Azure][AlmaLinux-8.5] nm-cloud-setup.service makes network connectivity loss (BZ#2014510)
Which versions are affected by ALBA-2021:4061?
Linux distribution packages (1)
NetworkManager-libnm-devel AlmaLinux:8 | All versions | 1:1.30.0-13.el8_4 |
How do I fix ALBA-2021:4061?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is ALBA-2021:4061 being exploited?
There is no known exploitation of ALBA-2021:4061 in the wild and no public exploit code.