Skip to content
OpenAdvisories
Medium RLSA-2025:0288 1 CVE

Moderate: Bug fix of NetworkManager

Published May 7, 2025 · Updated May 7, 2025

Ecosystem: Rocky Linux

Summary

Security and Bug Fix(es):

* NetworkManager: DHCP routing options can manipulate interface-based VPN traffic (CVE-2024-3661)

* Route to VPN server not stored in routing table that is specified by ipv4.route-table (JIRA:Rocky Linux-73051)

* VPN connections do not support ipv4.routing-rules settings (JIRA:Rocky Linux-73052)

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 8 NetworkManager 1:1.40.16-18.el8_10

Vulnerabilities 1

  • High 7.6
    CVE-2024-3661 Public exploit

    DHCP routing options can manipulate interface-based VPN traffic

    DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network …

    IETF DHCP openvpn libreswan Ubuntu