CVE-2025-9615: Red Hat Enterprise Linux 10

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

A flaw was found in NetworkManager. The NetworkManager package allows access to files that may belong to other users. NetworkManager allows non-root users to configure the system's network. The daemon runs with root privileges and can access files owned by users different from the one who added the connection.

Affected products

• Red Hat Red Hat Enterprise Linux 10: before 1:1.56.0-1.el10 (fixed in 1:1.56.0-1.el10)
• Red Hat Red Hat Enterprise Linux 6
• Red Hat Red Hat Enterprise Linux 7
• Red Hat Red Hat Enterprise Linux 8
• Red Hat Red Hat Enterprise Linux 9: before 1:1.54.3-2.el9 (fixed in 1:1.54.3-2.el9)
• Red Hat Red Hat Openshift Container Platform 4

Published 2026-01-26. Last modified 2026-06-30.