CVE-2026-82552
Received Received - Intake

Denial of Service in Linux Foundation Magma gNB Termination Handler

Publication date: 2026-08-30

Last updated on: 2026-08-30

Assigner: VulDB

Description
A security vulnerability has been detected in Linux Foundation Magma 1.9.0. Affected by this vulnerability is an unknown functionality of the file tasks/ngap/ngap_amf.c of the component gNB Termination Handler. The manipulation leads to denial of service. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-30
Last Modified
2026-08-30
Generated
2026-08-30
AI Q&A
2026-08-30
EPSS Evaluated
N/A
NVD
CVE-2026-82552
EUVD
EUVD-2026-68272

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux_foundation magma 1.9.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-404 The product does not release or incorrectly releases a resource before it is made available for re-use.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-82552 is a denial of service vulnerability in Linux Foundation Magma 1.9.0. It occurs in the gNB Termination Handler component, specifically in the file tasks/ngap/ngap_amf.c. The issue involves the Access and Mobility Management Function failing to clean up contexts when a gNB is terminated or restarted, leaving stale contexts in memory. This blocks the RAN_UE_NGAP_ID, preventing new UE registrations until the AMF is restarted or contexts are manually cleared.

Detection Guidance

Check Magma AMF logs for errors like 'This ue context already exists' or 'Duplicate GNB_UE_NGAP_ID' during gNB termination or restart. Monitor for failed UE registration attempts and blocked RAN_UE_NGAP_IDs. Use commands like 'docker logs <amf-container>' to inspect logs for context cleanup failures.

Impact Analysis

This vulnerability can cause a denial of service by preventing new user equipment registrations. Affected systems may show errors like 'This ue context already exists' or 'Duplicate GNB_UE_NGAP_ID.' The issue persists until manual intervention or an AMF restart, disrupting network operations and potentially causing service outages.

Compliance Impact

This vulnerability causes a denial of service by preventing new UE registrations due to stale contexts in the AMF component. While not directly violating GDPR or HIPAA, such disruptions could impact availability of critical services, potentially leading to compliance issues if they affect data processing or access to protected health information.

Mitigation Strategies

Restart the AMF component to clear stale contexts. Update Magma to a patched version if available. Manually clear affected contexts using AMF management tools. Disable 5G support temporarily if not critical until a fix is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-82552. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart