# ALSA-2025:0288: Security update for 16 packages

ALSA-2025:0288, released January 13, 2025, fixes 1 CVE across 16 products. None of them is reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/fix/linux/alsa-2025-0288
- Platform: Linux
- Released: Jan 13, 2025
- Priority: High (Closes CVE-2024-3661, high severity)
- CVEs: 1, exploited: 0, on CISA KEV: 0
- Vendor advisory: https://osv.dev/vulnerability/ALSA-2025:0288

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [NetworkManager](https://patchblox.com/security/data/product/linux/networkmanager.md) | almalinux 8 | 1:1.40.16-18.el8_10 |
| [NetworkManager-adsl](https://patchblox.com/security/data/product/linux/networkmanager-adsl.md) | almalinux 8 | 1:1.40.16-18.el8_10 |
| [NetworkManager-bluetooth](https://patchblox.com/security/data/product/linux/networkmanager-bluetooth.md) | almalinux 8 | 1:1.40.16-18.el8_10 |
| [NetworkManager-cloud-setup](https://patchblox.com/security/data/product/linux/networkmanager-cloud-setup.md) | almalinux 8 | 1:1.40.16-18.el8_10 |
| [NetworkManager-config-connectivity-redhat](https://patchblox.com/security/data/product/linux/networkmanager-config-connectivity-redhat.md) | almalinux 8 | 1:1.40.16-18.el8_10 |
| [NetworkManager-config-server](https://patchblox.com/security/data/product/linux/networkmanager-config-server.md) | almalinux 8 | 1:1.40.16-18.el8_10 |
| [NetworkManager-dispatcher-routing-rules](https://patchblox.com/security/data/product/linux/networkmanager-dispatcher-routing-rules.md) | almalinux 8 | 1:1.40.16-18.el8_10 |
| [NetworkManager-initscripts-updown](https://patchblox.com/security/data/product/linux/networkmanager-initscripts-updown.md) | almalinux 8 | 1:1.40.16-18.el8_10 |
| [NetworkManager-libnm](https://patchblox.com/security/data/product/linux/networkmanager-libnm.md) | almalinux 8 | 1:1.40.16-18.el8_10 |
| [NetworkManager-libnm-devel](https://patchblox.com/security/data/product/linux/networkmanager-libnm-devel.md) | almalinux 8 | 1:1.40.16-18.el8_10 |
| [NetworkManager-ovs](https://patchblox.com/security/data/product/linux/networkmanager-ovs.md) | almalinux 8 | 1:1.40.16-18.el8_10 |
| [NetworkManager-ppp](https://patchblox.com/security/data/product/linux/networkmanager-ppp.md) | almalinux 8 | 1:1.40.16-18.el8_10 |
| [NetworkManager-team](https://patchblox.com/security/data/product/linux/networkmanager-team.md) | almalinux 8 | 1:1.40.16-18.el8_10 |
| [NetworkManager-tui](https://patchblox.com/security/data/product/linux/networkmanager-tui.md) | almalinux 8 | 1:1.40.16-18.el8_10 |
| [NetworkManager-wifi](https://patchblox.com/security/data/product/linux/networkmanager-wifi.md) | almalinux 8 | 1:1.40.16-18.el8_10 |
| [NetworkManager-wwan](https://patchblox.com/security/data/product/linux/networkmanager-wwan.md) | almalinux 8 | 1:1.40.16-18.el8_10 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2024-3661](https://patchblox.com/security/data/cve/CVE-2024-3661.md) | High | NetworkManager-cloud-setup: Security and Bug Fix(es):  * NetworkManager: DHCP routing options can manipulate interface-based VPN traffic (CVE-202... | 7.6 | 0.0406 |  |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo