CVE-2024-6501

What it actually does

NetworkManager crashes when processing a malformed LLDP packet on an interface with LLDP enabled while DEBUG logging is active, resulting in denial of service.

Why it matters to the business

Network connectivity management fails until the service restarts, potentially disrupting network-dependent operations on affected Linux systems.

How an attack unfolds

An attacker sends a crafted LLDP packet over the network to an interface configured with LLDP; if DEBUG logging is enabled, NetworkManager fails to handle the malformed packet and terminates.

How to fix it

Upgrade affected packages to the listed fixed versions such as NetworkManager 5.10.84-1 on Debian 11, 5.15.15-1 on Debian 12/13, or the corresponding Ubuntu package versions including 5.15.0-17.17 and later for Ubuntu 22.04 LTS variants.

How to confirm the fix worked

Verify package versions match or exceed the fixed releases for each distribution; test LLDP packet handling under DEBUG logging to confirm no crash occurs.

Typical attack path

1. Identify systems running NetworkManager with LLDP enabled on an interface and DEBUG logging active
2. Craft and transmit a malformed LLDP packet targeting the vulnerable interface
3. Trigger process crash leading to temporary loss of network management functionality

How to detect it

Monitor system and NetworkManager logs for unexpected crashes or segmentation faults immediately following LLDP packet reception on enabled interfaces.

What your security team should do

• Apply the listed fixed package versions immediately on all affected distributions
• Disable DEBUG logging for NetworkManager in production unless required
• Review LLDP configuration and restrict it to trusted interfaces where possible