A flaw was found in NetworkManager. This local privilege escalation vulnerability exists in NetworkManager's dhclient backend when processing malformed Manufacturer Usage Description (MUD) URLs. A local user can exploit this flaw to escalate privileges by triggering a script via a crafted MUD URL, provided an administrator has explicitly configured NetworkManager to use dhclient. This issue does not affect default configurations of NetworkManager.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade NetworkManager-initscripts-updownUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-libnm-develUpgrade NetworkManager-ovsUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-libnmUpgrade NetworkManager-adslUpgrade NetworkManager-config-serverUpgrade NetworkManager-tuiUpgrade NetworkManager-bluetoothUpgrade NetworkManager-config-connectivity-redhatUpgrade NetworkManager-wifiUpgrade NetworkManagerUpgrade NetworkManager-pppUpgrade NetworkManager-wwanUpgrade NetworkManager-team | Oct 11, 2026 | Aug 24, 2026 |
| Oracle_linux | — | Upgrade NetworkManager-config-connectivity-oracleUpgrade NetworkManager-pppUpgrade NetworkManager-tuiUpgrade NetworkManagerUpgrade NetworkManager-bluetoothUpgrade NetworkManager-libnm-develUpgrade NetworkManager-wifiUpgrade NetworkManager-config-serverUpgrade NetworkManager-ovsUpgrade NetworkManager-wwanUpgrade NetworkManager-initscripts-updownUpgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-teamUpgrade NetworkManager-libnmUpgrade NetworkManager-adsl | Oct 22, 2026 | Jun 4, 2026 |
| Redhat_linux | — | Upgrade NetworkManager-dispatcher-routing-rulesUpgrade NetworkManager-initscripts-updownUpgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManager-debugsourceUpgrade NetworkManager-adslUpgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-ovs-debuginfoUpgrade NetworkManager-wifiUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-pppUpgrade NetworkManager-ovsUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-teamUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-libnm-develUpgrade NetworkManager-config-serverUpgrade NetworkManager-debuginfoUpgrade NetworkManagerUpgrade NetworkManager-tuiUpgrade NetworkManager-libnmUpgrade NetworkManager-bluetoothUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManager-config-connectivity-redhatUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-wwan | Jul 17, 2026 | Jun 4, 2026 |
| Rocky_linux | — | Upgrade NetworkManager-debuginfoUpgrade NetworkManager-team-debuginfoUpgrade NetworkManager-debugsourceUpgrade NetworkManager-tuiUpgrade NetworkManager-libnm-develUpgrade NetworkManager-ppp-debuginfoUpgrade NetworkManager-wwan-debuginfoUpgrade NetworkManager-teamUpgrade NetworkManager-wwanUpgrade NetworkManager-libnm-debuginfoUpgrade NetworkManager-cloud-setup-debuginfoUpgrade NetworkManagerUpgrade NetworkManager-wifiUpgrade NetworkManager-ovsUpgrade NetworkManager-cloud-setupUpgrade NetworkManager-wifi-debuginfoUpgrade NetworkManager-libnmUpgrade NetworkManager-bluetoothUpgrade NetworkManager-tui-debuginfoUpgrade NetworkManager-bluetooth-debuginfoUpgrade NetworkManager-adslUpgrade NetworkManager-adsl-debuginfoUpgrade NetworkManager-pppUpgrade NetworkManager-ovs-debuginfo | Aug 26, 2026 | Aug 24, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub