PT-2026-21591 · Free5Gc · Free5Gc Smf

Linziyuu · Publicado 2026-02-24 · Atualizado 2026-03-01 · CVE-2026-26025

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions free5GC SMF versions up to and including 1.4.1

Description free5GC SMF provides the Session Management Function for free5GC, an open-source project for 5G mobile core networks. The software experiences a panic and terminates when processing a malformed PFCP SessionReportRequest on the PFCP (UDP/8805) interface. The issue occurs when receiving a malformed message via the PFCP interface, specifically a SessionReportRequest. No upstream fix is currently available. Mitigation strategies include restricting access to the PFCP interface to trusted UPF IPs, dropping or inspecting malformed PFCP SessionReportRequest messages at the network edge, or adding recover() around PFCP handler dispatch to prevent complete process termination.

Recommendations free5GC SMF versions up to and including 1.4.1: Apply ACL/firewall rules to the PFCP interface to allow only trusted UPF IPs to connect. free5GC SMF versions up to and including 1.4.1: Drop or inspect malformed PFCP SessionReportRequest messages at the network edge. free5GC SMF versions up to and including 1.4.1: Add recover() around PFCP handler dispatch to avoid whole-process termination as a mitigation.

Exploit

Correção

DoS

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

CVE-2026-26025

GHSA-VW8R-P7H3-G3XH

Produtos afetados

Free5Gc Smf

Referências · 11

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/26xxx/CVE-2026-26025.json · Exploit
• 🔥 https://github.com/free5gc/free5gc/issues/807 · Exploit
• https://github.com/free5gc/free5gc/security/advisories/GHSA-vw8r-p7h3-g3xh · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-26025 · Nota de Segurança
• https://twitter.com/CVEnew/status/2026184662264242284 · Publicação no Twitter
• https://twitter.com/cracbot/status/2028062755346092090 · Publicação no Twitter
• https://t.me/cveNotify/153189 · Publicação no Telegram
• https://twitter.com/cracbot/status/2027700442764087346 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/2026189691435847953 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-26025 · Aviso do Fabricante
• https://twitter.com/cracbot/status/2027338143117271397 · Publicação no Twitter