Back Linuxsecurity

Fedora 43 NetworkManager-l2tp Critical CVE Fixes 2026

Linuxsecurity •LinuxSecurity Advisories • September 29, 2026

Share: View original

CISA confirms exploitation of a Linux firewall flaw. Check if your systems need the fix. ×

This package contains software for integrating L2TP and L2TP over

IPsec VPN support with the NetworkManager.

Updated to 1.52.6 Includes fixes for CVE-2026-75131 & CVE-2026-93337

* Sun Sep 20 2026 Douglas Kosovic - 1.52.6-1 - Updated to 1.52.6 Includes fixes for CVE-2026-75131 & CVE-2026-93337 * Wed Jul 15 2026 Fedora Release Engineering - 1.52.4-2 - Rebuilt for

Fedora Update Notification FEDORA-2026-1b63888725 2026-09-29 00:43:42.230031+00:00 Name : NetworkManager-l2tp Product : Fedora 43 Version : 1.52.6 Release : 1.fc43 URL : Summary : NetworkManager VPN plugin for L2TP and L2TP/IPsec Description : This package contains software for integrating L2TP and L2TP over IPsec VPN support with the NetworkManager.

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-1b63888725' at the command line. For more information, refer to the dnf documentation available at

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical CVE Fixes for Fedora NetworkManager Plugins Released On September 29, 2026, Fedora released critical updates for NetworkManager-l2tp and NetworkManager-iodine plugins to address vulnerabilities CVE-2026-75131, CVE-2026-93337, and CVE-2026-91837. These vulnerabilities could allow local privilege escalation and exploitation of firewall flaws, affecting Fedora 43, 44, and 45 systems. CISA confirmed that these issues are being actively exploited in the wild, prompting urgent action from system administrators. Users are advised to apply the updates immediately using the dnf package manager. The updates were published in response to confirmed exploitation attempts targeting these vulnerabilities. The patches are crucial for maintaining the security of VPN connections integrated with NetworkManager. 5 sources 76

Extracted Entities

CVEs (2)

CVE-2026-75131 CVE-2026-93337

Platforms (1)

Linux