Description
A time-of-check-time-of-use (TOCTOU) race condition vulnerability was found in networkd-dispatcher. This flaw exists because there is a certain time between the scripts being discovered and them being run. An attacker can abuse this vulnerability to replace scripts that networkd-dispatcher believes to be owned by root with ones that are not.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | networkd-dispatcher | uknown | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | networkd-dispatcher | 2.2.3-1 | — |
| Debian 13 | networkd-dispatcher | 2.2.3-1 | — |
| Debian 12 | networkd-dispatcher | 2.2.3-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | networkd-dispatcher | 2.1-2ubuntu0.22.04.1 | USN-5395-1 |
| Ubuntu 20.04 LTS | networkd-dispatcher | 2.1-2~ubuntu20.04.2 | USN-5395-1 |
| Ubuntu 18.04 LTS | networkd-dispatcher | 1.7-0ubuntu3.4 | USN-5395-1 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 1 repository
-
ngtuonghung/nimbuspwn-CVE-2022-29800-CVE-2022-29799 ★ 0 · Nov 9, 2025
PoC for Nimbuspwn: Linux Privilege Escalation via Path Traversal and TOCTOU in networkd-dispatcher
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 1
- USN-5395-1 networkd-dispatcher vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026