NetworkManager CVE-2026-10805

No vendor-released patch version has been independently confirmed from the available data - the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-10805 and the associated Bugzilla ticket at https://bugzilla.redhat.com/show_bug.cgi?id=2484613 should be monitored for patch availability and exact fix versions. As an immediate compensating control, administrators should audit whether dhclient has been explicitly set as the NetworkManager DHCP backend by checking /etc/NetworkManager/NetworkManager.conf for the directive 'dhcp=dhclient'; if present, reverting to the default internal backend ('dhcp=internal') eliminates the attack surface entirely with minimal operational impact, as the internal backend supports standard DHCP functionality. If dhclient is operationally required for specific features, restrict local interactive shell access for untrusted users on affected systems and audit which accounts have permissions to influence network interface configuration or trigger DHCP renegotiation events.