CVE-2024-6501
Networkmanager: denial of service
A flaw was found in NetworkManager. When a system running NetworkManager with DEBUG logs enabled and an interface eth1 configured with LLDP enabled, a malicious user could inject a malformed LLDP packet. NetworkManager would crash, leading to a denial of service.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Networkmanager: denial of service
A flaw was found in NetworkManager. When a system running NetworkManager with DEBUG logs enabled and an interface eth1 configured with LLDP enabled, a malicious user could inject a malformed LLDP packet. NetworkManager would crash, leading to a denial of service.
- Record
CVE-2024-6501- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Weakness
- CWE-400
- Updated
- 2026-11-02
EUVDEUVD-2024-48009
A flaw was found in NetworkManager. When a system running NetworkManager with DEBUG logs enabled and an interface eth1 configured with LLDP enabled, a malicious user could inject a malformed LLDP packet. NetworkManager would crash, leading to a denial of service.
- Record
EUVD-2024-48009- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-gwgm-rhr4-mf4h
A flaw was found in NetworkManager. When a system running NetworkManager with DEBUG logs enabled...
A flaw was found in NetworkManager. When a system running NetworkManager with DEBUG logs enabled and an interface eth1 configured with LLDP enabled, a malicious user could inject a malformed LLDP packet. NetworkManager would crash, leading to a denial of service.
- Record
GHSA-gwgm-rhr4-mf4h- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Weakness
- CWE-400
- Updated
- 2026-11-02
NVD
A flaw was found in NetworkManager. When a system running NetworkManager with DEBUG logs enabled and an interface eth1 configured with LLDP enabled, a malicious user could inject a malformed LLDP packet. NetworkManager would crash, leading to a denial of service.
- Record
CVE-2024-6501- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Weakness
- CWE-400
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2024-6501
A flaw was found in NetworkManager. When a system running NetworkManager with DEBUG logs enabled and an interface eth1 configured with LLDP enabled, a malicious user could inject a malformed LLDP packet. NetworkManager would crash, leading to a denial of service.
- Record
DEBIAN-CVE-2024-6501- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVOESA-2024-2291
NetworkManager security update
NetworkManager attempts to keep an active network connection available at all times. The point of NetworkManager is to make networking configuration and setup as painless and automatic as possible. If using DHCP, NetworkManager is intended to replace default routes, obtain IP addresses from a DHCP server, and change name servers whenever it sees fit.
Security Fix(es):
A flaw was found in NetworkManager. When a system running NetworkManager with DEBUG logs enabled and an interface eth1 configured with LLDP enabled, a malicious user could inject a malformed LLDP packet. NetworkManager would crash, leading to a denial of service.(CVE-2024-6501)
- Record
OESA-2024-2291- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
Show 5 moreShow less
OSVRHSA-2024:9317
Red Hat Security Advisory: NetworkManager security update
- Record
RHSA-2024:9317- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-6501
A flaw was found in NetworkManager. When a system running NetworkManager with DEBUG logs enabled and an interface eth1 configured with LLDP enabled, a malicious user could inject a malformed LLDP packet. NetworkManager would crash, leading to a denial of service.
- Record
UBUNTU-CVE-2024-6501- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVALSA-2024:9317 No score
Low: NetworkManager security update
NetworkManager is a system network service that manages network devices and connections, attempting to keep active network connectivity when available. Its capabilities include managing Ethernet, wireless, mobile broadband (WWAN), and PPPoE devices, as well as providing VPN integration with a variety of different VPN services.
Security Fix(es):
- NetworkManager: Denial of Service (CVE-2024-6501)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.
- Record
ALSA-2024:9317- Updated
- 2026-11-02
OSVCLSA-2026-1779533209 No score
NetworkManager: Fix of CVE-2024-6501
- CVE-2024-6501: NULL pointer dereference of n->lldp_rx in nm_lldp_neighbor_parse() when DEBUG logging is enabled, leading to denial-of-service on malformed LLDP packets
- Record
CLSA-2026-1779533209- Updated
- 2026-11-02
OSV No score
A flaw was found in NetworkManager. When a system running NetworkManager with DEBUG logs enabled and an interface eth1 configured with LLDP enabled, a malicious user could inject a malformed LLDP packet. NetworkManager would crash, leading to a denial of service.
- Record
CVE-2024-6501- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
NetworkManagerAlmaLinux:9 |
before 1:1.48.10-2.el9_5.alma.1 | 1:1.48.10-2.el9_5.alma.1 |
NetworkManager-adslAlmaLinux:9 |
before 1:1.48.10-2.el9_5.alma.1 | 1:1.48.10-2.el9_5.alma.1 |
NetworkManager-bluetoothAlmaLinux:9 |
before 1:1.48.10-2.el9_5.alma.1 | 1:1.48.10-2.el9_5.alma.1 |
NetworkManager-cloud-setupAlmaLinux:9 |
before 1:1.48.10-2.el9_5.alma.1 | 1:1.48.10-2.el9_5.alma.1 |
NetworkManager-config-connectivity-redhatAlmaLinux:9 |
before 1:1.48.10-2.el9_5.alma.1 | 1:1.48.10-2.el9_5.alma.1 |
NetworkManager-config-serverAlmaLinux:9 |
before 1:1.48.10-2.el9_5.alma.1 | 1:1.48.10-2.el9_5.alma.1 |
NetworkManager-dispatcher-routing-rulesAlmaLinux:9 |
before 1:1.48.10-2.el9_5.alma.1 | 1:1.48.10-2.el9_5.alma.1 |
NetworkManager-initscripts-updownAlmaLinux:9 |
before 1:1.48.10-2.el9_5.alma.1 | 1:1.48.10-2.el9_5.alma.1 |
NetworkManager-libnmAlmaLinux:9 |
before 1:1.48.10-2.el9_5.alma.1 | 1:1.48.10-2.el9_5.alma.1 |
NetworkManager-libnm-develAlmaLinux:9 |
before 1:1.48.10-2.el9_5.alma.1 | 1:1.48.10-2.el9_5.alma.1 |
Show 79 moreShow less
| Package | Affected | Fixed |
|---|---|---|
NetworkManager-ovsAlmaLinux:9 |
before 1:1.48.10-2.el9_5.alma.1 | 1:1.48.10-2.el9_5.alma.1 |
NetworkManager-pppAlmaLinux:9 |
before 1:1.48.10-2.el9_5.alma.1 | 1:1.48.10-2.el9_5.alma.1 |
NetworkManager-teamAlmaLinux:9 |
before 1:1.48.10-2.el9_5.alma.1 | 1:1.48.10-2.el9_5.alma.1 |
NetworkManager-tuiAlmaLinux:9 |
before 1:1.48.10-2.el9_5.alma.1 | 1:1.48.10-2.el9_5.alma.1 |
NetworkManager-wifiAlmaLinux:9 |
before 1:1.48.10-2.el9_5.alma.1 | 1:1.48.10-2.el9_5.alma.1 |
NetworkManager-wwanAlmaLinux:9 |
before 1:1.48.10-2.el9_5.alma.1 | 1:1.48.10-2.el9_5.alma.1 |
NetworkManagerTuxCare:AlmaLinux:9.2 |
before 1:1.42.2-8.el9_2.tuxcare.els2 | 1:1.42.2-8.el9_2.tuxcare.els2 |
NetworkManager-adslTuxCare:AlmaLinux:9.2 |
before 1:1.42.2-8.el9_2.tuxcare.els2 | 1:1.42.2-8.el9_2.tuxcare.els2 |
NetworkManager-bluetoothTuxCare:AlmaLinux:9.2 |
before 1:1.42.2-8.el9_2.tuxcare.els2 | 1:1.42.2-8.el9_2.tuxcare.els2 |
NetworkManager-cloud-setupTuxCare:AlmaLinux:9.2 |
before 1:1.42.2-8.el9_2.tuxcare.els2 | 1:1.42.2-8.el9_2.tuxcare.els2 |
NetworkManager-config-connectivity-redhatTuxCare:AlmaLinux:9.2 |
before 1:1.42.2-8.el9_2.tuxcare.els2 | 1:1.42.2-8.el9_2.tuxcare.els2 |
NetworkManager-config-serverTuxCare:AlmaLinux:9.2 |
before 1:1.42.2-8.el9_2.tuxcare.els2 | 1:1.42.2-8.el9_2.tuxcare.els2 |
NetworkManager-dispatcher-routing-rulesTuxCare:AlmaLinux:9.2 |
before 1:1.42.2-8.el9_2.tuxcare.els2 | 1:1.42.2-8.el9_2.tuxcare.els2 |
NetworkManager-initscripts-updownTuxCare:AlmaLinux:9.2 |
before 1:1.42.2-8.el9_2.tuxcare.els2 | 1:1.42.2-8.el9_2.tuxcare.els2 |
NetworkManager-libnmTuxCare:AlmaLinux:9.2 |
before 1:1.42.2-8.el9_2.tuxcare.els2 | 1:1.42.2-8.el9_2.tuxcare.els2 |
NetworkManager-libnm-develTuxCare:AlmaLinux:9.2 |
before 1:1.42.2-8.el9_2.tuxcare.els2 | 1:1.42.2-8.el9_2.tuxcare.els2 |
NetworkManager-ovsTuxCare:AlmaLinux:9.2 |
before 1:1.42.2-8.el9_2.tuxcare.els2 | 1:1.42.2-8.el9_2.tuxcare.els2 |
NetworkManager-pppTuxCare:AlmaLinux:9.2 |
before 1:1.42.2-8.el9_2.tuxcare.els2 | 1:1.42.2-8.el9_2.tuxcare.els2 |
NetworkManager-teamTuxCare:AlmaLinux:9.2 |
before 1:1.42.2-8.el9_2.tuxcare.els2 | 1:1.42.2-8.el9_2.tuxcare.els2 |
NetworkManager-tuiTuxCare:AlmaLinux:9.2 |
before 1:1.42.2-8.el9_2.tuxcare.els2 | 1:1.42.2-8.el9_2.tuxcare.els2 |
NetworkManager-wifiTuxCare:AlmaLinux:9.2 |
before 1:1.42.2-8.el9_2.tuxcare.els2 | 1:1.42.2-8.el9_2.tuxcare.els2 |
NetworkManager-wwanTuxCare:AlmaLinux:9.2 |
before 1:1.42.2-8.el9_2.tuxcare.els2 | 1:1.42.2-8.el9_2.tuxcare.els2 |
network-managerDebian:12 |
before 1.42.4-1+deb12u1, plus listed versions 1.42.4-1 |
1.42.4-1+deb12u1 |
network-managerDebian:13 |
before 1.49.90-2 | 1.49.90-2 |
network-managerDebian:14 |
before 1.49.90-2 | 1.49.90-2 |
NetworkManageropenEuler:24.03-LTS |
before 1.44.2-3.oe2403 | 1.44.2-3.oe2403 |
NetworkManager-adsl-debuginfoRed Hat:enterprise_linux:9::appstream |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-bluetooth-debuginfoRed Hat:enterprise_linux:9::appstream |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-cloud-setupRed Hat:enterprise_linux:9::appstream |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-cloud-setup-debuginfoRed Hat:enterprise_linux:9::appstream |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-config-connectivity-redhatRed Hat:enterprise_linux:9::appstream |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-debuginfoRed Hat:enterprise_linux:9::appstream |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-debugsourceRed Hat:enterprise_linux:9::appstream |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-dispatcher-routing-rulesRed Hat:enterprise_linux:9::appstream |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-libnm-debuginfoRed Hat:enterprise_linux:9::appstream |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-ovsRed Hat:enterprise_linux:9::appstream |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-ovs-debuginfoRed Hat:enterprise_linux:9::appstream |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-pppRed Hat:enterprise_linux:9::appstream |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-ppp-debuginfoRed Hat:enterprise_linux:9::appstream |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-team-debuginfoRed Hat:enterprise_linux:9::appstream |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-tui-debuginfoRed Hat:enterprise_linux:9::appstream |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-wifi-debuginfoRed Hat:enterprise_linux:9::appstream |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-wwan-debuginfoRed Hat:enterprise_linux:9::appstream |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManagerRed Hat:enterprise_linux:9::baseos |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-adslRed Hat:enterprise_linux:9::baseos |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-adsl-debuginfoRed Hat:enterprise_linux:9::baseos |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-bluetoothRed Hat:enterprise_linux:9::baseos |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-bluetooth-debuginfoRed Hat:enterprise_linux:9::baseos |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-cloud-setup-debuginfoRed Hat:enterprise_linux:9::baseos |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-config-serverRed Hat:enterprise_linux:9::baseos |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-debuginfoRed Hat:enterprise_linux:9::baseos |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-debugsourceRed Hat:enterprise_linux:9::baseos |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-initscripts-updownRed Hat:enterprise_linux:9::baseos |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-libnmRed Hat:enterprise_linux:9::baseos |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-libnm-debuginfoRed Hat:enterprise_linux:9::baseos |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-ovs-debuginfoRed Hat:enterprise_linux:9::baseos |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-ppp-debuginfoRed Hat:enterprise_linux:9::baseos |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-teamRed Hat:enterprise_linux:9::baseos |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-team-debuginfoRed Hat:enterprise_linux:9::baseos |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-tuiRed Hat:enterprise_linux:9::baseos |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-tui-debuginfoRed Hat:enterprise_linux:9::baseos |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-wifiRed Hat:enterprise_linux:9::baseos |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-wifi-debuginfoRed Hat:enterprise_linux:9::baseos |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-wwanRed Hat:enterprise_linux:9::baseos |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-wwan-debuginfoRed Hat:enterprise_linux:9::baseos |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-adsl-debuginfoRed Hat:enterprise_linux:9::crb |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-bluetooth-debuginfoRed Hat:enterprise_linux:9::crb |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-cloud-setup-debuginfoRed Hat:enterprise_linux:9::crb |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-debuginfoRed Hat:enterprise_linux:9::crb |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-debugsourceRed Hat:enterprise_linux:9::crb |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-libnm-debuginfoRed Hat:enterprise_linux:9::crb |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-libnm-develRed Hat:enterprise_linux:9::crb |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-ovs-debuginfoRed Hat:enterprise_linux:9::crb |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-ppp-debuginfoRed Hat:enterprise_linux:9::crb |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-team-debuginfoRed Hat:enterprise_linux:9::crb |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-tui-debuginfoRed Hat:enterprise_linux:9::crb |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-wifi-debuginfoRed Hat:enterprise_linux:9::crb |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
NetworkManager-wwan-debuginfoRed Hat:enterprise_linux:9::crb |
before 1:1.48.10-2.el9_5 | 1:1.48.10-2.el9_5 |
network-managerUbuntu:24.04:LTS |
All versions, plus listed versions 1.44.2-1ubuntu11.44.2-1ubuntu1.11.44.2-1ubuntu21.44.2-7ubuntu11.45.90-1ubuntu1 Show 9 moreShow less1.45.90-1ubuntu31.46.0-1ubuntu21.46.0-1ubuntu2.21.46.0-1ubuntu2.31.46.0-1ubuntu2.41.46.0-1ubuntu2.51.46.0-1ubuntu2.61.46.0-1ubuntu2.71.46.0-1ubuntu2.8 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-6501 is a low vulnerability (CVSS 3.1) in Red Hat Enterprise Linux 6, published July 9, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.45%, the 39th percentile. Fixed in NetworkManager 1:1.48.10-2.el9_5.alma.1.
References
access.redhat.com/errata/RHSA-2024:9317
bugzilla.redhat.com/show_bug.cgi?id=2295734
nvd.nist.gov/vuln/detail/CVE-2024-6501
github.com/advisories/GHSA-gwgm-rhr4-mf4h
Show 28 moreShow less
errata.almalinux.org/9/ALSA-2024-9317.html
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1779533209.html
security-tracker.debian.org/tracker/CVE-2024-6501
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2024-2291
docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index
issues.redhat.com/browse/RHEL-1418
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9317.json
cve.org/CVERecord?id=CVE-2024-6501
ubuntu.com/security/CVE-2024-6501