A flaw was found in NetworkManager. The NetworkManager package allows access to files that may belong to other users. NetworkManager allows non-root users to configure the systems network. The daemon runs with root privileges and can access files owned by users different from the one who added the connection.
Weakness
The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Network-manager | Ubuntu | plucky | * |
| Network-manager | Ubuntu | upstream | * |
References
- https://access.redhat.com/security/cve/CVE-2025-9615
- https://bugzilla.redhat.com/show_bug.cgi?id=2391503
- https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/1809
- https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2324
- https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/merge_requests/2327