SUSE · security update for NetworkManager
Affects SUSESource GCVE Database
Not known to be exploited · CVSS 3.1 Low.
Data as of 26 Oct 2026, 09:15 UTC
- EPSS
- 0.4% chance of exploitation in 30 days – higher than 38% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:LExploitation evidence
Disclosed: evidence found.
CVE published 9 Jul 2024
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
Red Hatredhat/NetworkManagerpkg:rpm/redhat/NetworkManagerOther threats | Affected
| Fixed in– |
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
A security update is available from Red Hat and SUSE that addresses this vulnerability. Users should apply the official patches provided in Red Hat Enterprise Linux 9.5 and corresponding SUSE updates. Since this is a low severity issue triggered only under DEBUG logging, systems not running with DEBUG logs enabled are not at significant risk. Refer to the vendor advisories and update instructions at https://access.redhat.com/articles/11258 for remediation details.
Description
A denial of service vulnerability (CVE-2024-6501) affects NetworkManager versions 9.0 up to but not including 9.5. The flaw triggers a crash when NetworkManager runs with DEBUG logging enabled and receives a malformed LLDP packet on an interface with LLDP enabled. The impact is rated low because production systems typically do not run NetworkManager with DEBUG logging enabled.
References
- access.redhat.com/errata/RHSA-2024:9317 (opens in a new tab)
- docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index (opens in a new tab)
- access.redhat.com/security/updates/classification/ (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=2295734 (opens in a new tab)
- issues.redhat.com/browse/RHEL-1418 (opens in a new tab)
- issues.redhat.com/browse/RHEL-17310 (opens in a new tab)
- issues.redhat.com/browse/RHEL-17350 (opens in a new tab)
- issues.redhat.com/browse/RHEL-17972 (opens in a new tab)
- issues.redhat.com/browse/RHEL-23446 (opens in a new tab)
- issues.redhat.com/browse/RHEL-24622 (opens in a new tab)
- issues.redhat.com/browse/RHEL-26750 (opens in a new tab)
- issues.redhat.com/browse/RHEL-26753 (opens in a new tab)
- issues.redhat.com/browse/RHEL-29856 (opens in a new tab)
- issues.redhat.com/browse/RHEL-29902 (opens in a new tab)
- issues.redhat.com/browse/RHEL-30348 (opens in a new tab)
- issues.redhat.com/browse/RHEL-31182 (opens in a new tab)
- issues.redhat.com/browse/RHEL-31980 (opens in a new tab)
- issues.redhat.com/browse/RHEL-33368 (opens in a new tab)
- issues.redhat.com/browse/RHEL-34617 (opens in a new tab)
- issues.redhat.com/browse/RHEL-36648 (opens in a new tab)
- ubuntu.com/security/CVE-2024-6501 (opens in a new tab)
- cve.org/CVERecord?id=CVE-2024-6501 (opens in a new tab)
- access.redhat.com/security/cve/CVE-2024-6501 (opens in a new tab)
- suse.com/support/security/rating/ (opens in a new tab)
- ftp.suse.com/pub/projects/security/csaf/rhsa-2024_9317.json (opens in a new tab)
- lists.suse.com/pipermail/suse-liberty-linux-updates/2024-November/000582.html (opens in a new tab)
- suse.com/security/cve/CVE-2024-6501/ (opens in a new tab)