CVE-2026-106807
Summary
| CVE | CVE-2026-106807 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-11-02 17:17:33 UTC |
| Updated | 2026-11-02 19:35:33 UTC |
| Description | A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling path. When the PFCP transaction or timer resource pool is exhausted, ogs_pfcp_xact_remote_create() returns NULL, but the failure is not handled properly and leads to an ogs_assert(new) failure in ogs_pfcp_xact_receive(). An attacker able to send PFCP messages to the affected SMF/UPF can exhaust transaction resources and cause the network function process to terminate with SIGABRT, resulting in service disruption and preventing further session establishment until the affected component is restarted. |
Risk And Classification
Problem Types: n/a
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| github.com/open5gs/open5gs/issues/4791 | [email protected] | github.com | |
| github.com/open5gs/open5gs/commit/d91af3b0ac59f6e9dab25718ef4eed9cbf2813ca | [email protected] | github.com | |
| gist.github.com/hackeryounow/a453020171ed5bc36036fb05c5fd448e | [email protected] | gist.github.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.