Description
Race condition in Network Manager before 1.0.12 as packaged in Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux HPC Node 7, Red Hat Enterprise Linux Server 7, and Red Hat Enterprise Linux Workstation 7 allows local users to obtain sensitive connection information by reading temporary files during ifcfg and keyfile changes.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | network-manager | 1.1.91-1 | — |
| Debian 13 | network-manager | 1.1.91-1 | — |
| Debian 12 | network-manager | 1.1.91-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 7 | NetworkManager +12 | 1:1.4.0-12.el7 | RHSA-2016:2581 |
| RHEL 7 | NetworkManager-libreswan +1 | 1.2.4-1.el7 | RHSA-2016:2581 |
| RHEL 7 | libnl3 +3 | 3.2.28-2.el7 | RHSA-2016:2581 |
| RHEL 7 | libnma +5 | 1.4.0-2.el7 | RHSA-2016:2581 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | NetworkManager | 1.4.2-1.2 | openSUSE-SU-2024:10152-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | NetworkManager +12 | 1:1.4.0-12.el7 | ELSA-2016-2581 |
| Oracle Linux 7 | NetworkManager-libreswan +1 | 1.2.4-1.el7 | ELSA-2016-2581 |
| Oracle Linux 7 | libnl3 +3 | 3.2.28-2.el7 | ELSA-2016-2581 |
| Oracle Linux 7 | libnma +5 | 1.4.0-2.el7 | ELSA-2016-2581 |
Advisories 3
- RHSA-2016:2581 Red Hat Security Advisory: NetworkManager security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
- openSUSE-SU-2024:10152-1 NetworkManager-1.4.2-1.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- ELSA-2016-2581 Low: NetworkManager security, bug fix, and enhancement update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Nov 9, 2016
References
- RHSA-2016:2581 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1324025