Free5GC SMF leaks UE IP addresses on failed PFCP session setup, causing denial of service
A 5G network control program can run out of addresses, so new devices cannot connect.
Summary
In Free5GC v4.2.3, the SMF fails to release UE IP addresses after a failed PFCP session establishment, so repeated failures can exhaust the pool and stop new UEs from starting PDU sessions. Operators running Free5GC as their 5G core are affected.
What to do
No fixed version is named in the sources. Check that you run a version newer than v4.2.3 and read the vendor's advisory.
Products and platforms
CVE IDs
Sources
- Write-up: github.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen