Skip to main content
CVE-2024-6501VulnerabilityPublished Updated

SUSE · security update for NetworkManager

Affects SUSESource GCVE Database

0
Authoritative record:CVE-2024-6501· Low 3.1

Not known to be exploited · CVSS 3.1 Low.

Data as of 26 Oct 2026, 09:15 UTC

CVSS 3.1 base score
3.1Low
How severe the flaw is on the 0–10 CVSS scale.
EPSS
0.4% chance of exploitation in 30 days – higher than 38% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 9 Jul 2024

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Affected software

ProductAffectedFixed in
Red Hatredhat/NetworkManagerpkg:rpm/redhat/NetworkManagerOther threatsAffected
  • =1.40
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

A security update is available from Red Hat and SUSE that addresses this vulnerability. Users should apply the official patches provided in Red Hat Enterprise Linux 9.5 and corresponding SUSE updates. Since this is a low severity issue triggered only under DEBUG logging, systems not running with DEBUG logs enabled are not at significant risk. Refer to the vendor advisories and update instructions at https://access.redhat.com/articles/11258 for remediation details.

Description

A denial of service vulnerability (CVE-2024-6501) affects NetworkManager versions 9.0 up to but not including 9.5. The flaw triggers a crash when NetworkManager runs with DEBUG logging enabled and receives a malformed LLDP packet on an interface with LLDP enabled. The impact is rated low because production systems typically do not run NetworkManager with DEBUG logging enabled.

References

Community reviews

Loading reviews…