CVE-2026-30051

Deferred Deferred - Pending Action

Denial of Service in free5gc v4.1.0

Publication date: 2026-08-27

Last updated on: 2026-08-31

Assigner: MITRE

Description

An issue in the CreateUEContextProcedure function (/v1/ue-contexts/{supi}) of free5gc v4.1.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted PUT request.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-27

Last Modified

2026-08-31

Generated

2026-09-17

AI Q&A

2026-08-27

EPSS Evaluated

2026-09-15

NVD

CVE-2026-30051

EUVD

EUVD-2026-67106

Affected Vendors & Products

Vendor	Product	Version / Range
free5gc	free5gc	4.1.0
free5gc	free5gc	From 4.0.1 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-770	The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

Executive Summary

This vulnerability is a Denial of Service (DoS) issue in the free5gc v4.1.0 software. It occurs in the CreateUEContextProcedure function which processes PUT requests to the /v1/ue-contexts/{supi} endpoint. The function crashes when the RestrictedRatList field is missing or empty because it tries to access the first element without checking if the list exists.

Detection Guidance

To detect this vulnerability, monitor the AMF service logs for crashes or restarts when processing PUT requests to /namf-comm/v1/ue-contexts/{supi}. Check for runtime panics related to RestrictedRatList indexing. Use tools like tcpdump or Wireshark to inspect PUT requests to this endpoint for malformed or empty RestrictedRatList fields.

Impact Analysis

This vulnerability can cause the AMF service to crash or restart unexpectedly when processing certain PUT requests. This disruption may lead to loss of network connectivity for users, service unavailability, and potential degradation of network performance.

Compliance Impact

This vulnerability causes a Denial of Service (DoS) by crashing the AMF service, which could disrupt network operations. For GDPR, this may impact availability of services handling personal data. For HIPAA, it could disrupt critical healthcare communications. However, the provided context does not specify direct compliance impacts.

Mitigation Strategies

Immediately update free5gc to the latest patched version. If an update is not available, modify the CreateUEContextProcedure function to validate RestrictedRatList before accessing it. Add a check to return HTTP 400 Bad Request if the list is missing or empty. Restrict network access to the AMF service to trusted sources only.

Hi! I’m here to help you understand CVE-2026-30051. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70