CVE-2026-82550
MediumCVSS 5.3Summary
A security flaw has been discovered in Linux Foundation Magma 1.9.0 in an unknown function of the NGSetupRequest Handler component. Manipulating the NG-IoT-DefaultPagingDRX argument results in improper input validation. Remote exploitation is possible, and the exploit has been released publicly. The project was informed but has not responded.
Risk Assessment
The risk includes remote exploitation of improper input validation, potentially leading to unexpected system behavior or network attacks.
Recommendation
It is recommended to urgently contact the vendor for patches and restrict access to affected components.
Other vulnerabilities in Linux Foundation Magma
See all- CVE-2026-82552Medium
A security vulnerability has been detected in Linux Foundation Magma 1.9.0. The vulnerability affects an unknown functionality in the file tasks/ngap/ngap_amf.c of the component gNB Termination Handler. The manipulation leads to denial of service. The attack can be carried out remotely. The exploit has been disclosed publicly.
- CVE-2026-82551Medium
A weakness has been identified in Linux Foundation Magma 1.9.0 in an unknown function of the file ngap_amf_handlers.c of the NGSetup Handler component. Manipulation can lead to a state issue. The attack can be executed remotely, and the exploit is publicly available.
- CVE-2026-82549High
A vulnerability in Linux Foundation Magma 1.9.0 affects an unknown function in the SecurityModeComplete Handler component. This manipulation leads to improper validation of the integrity check value. The attack may be launched remotely, and the exploit is publicly available.
- CVE-2026-82548Medium
A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.
Original NVD description (English source)
A security flaw has been discovered in Linux Foundation Magma 1.9.0. This impacts an unknown function of the component NGSetupRequest Handler. Performing a manipulation of the argument NG-IoT-DefaultPagingDRX results in improper input validation. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.