ALBA-2022:1549 NetworkManager bug fix and enhancement update
A bug in NetworkManager's DHCP client causes connectivity loss upon receiving NAKs, requiring a patch to restore network availability.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is ALBA-2022:1549?
ALBA-2022:1549 is a denial of service vulnerability in NetworkManager-cloud-setup, published on 26 Apr 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services.
Bug Fix(es) and Enhancement(s):
- NetworkManager DHCP client does not work maybe due to received NAKs (BZ#2065188)
Which versions are affected by ALBA-2022:1549?
Linux distribution packages (2)
NetworkManager-cloud-setup AlmaLinux:8 | All versions | 1:1.32.10-5.el8_5 |
NetworkManager-libnm-devel AlmaLinux:8 | All versions | 1:1.32.10-5.el8_5 |
How do I fix ALBA-2022:1549?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is ALBA-2022:1549 being exploited?
There is no known exploitation of ALBA-2022:1549 in the wild and no public exploit code.