| Title | Linux Foundation free5GC 4.2.0 State Synchronization Error |
|---|
| Description | Criticality in NGSetupRequest is set to Ignore for UERetentionInformation then it produces two responses. A success, followed by a failure. It can desynchronize client state as it is ambiguous which response to consider. Possible issue Denial of Services.
Reported Issue
https://github.com/free5gc/free5gc/issues/832
Patch is underway
https://github.com/free5gc/amf/pull/201 |
|---|
| Source | ⚠️ https://github.com/free5gc/free5gc/issues/832 |
|---|
| User | shovon0203 (UID 96191) |
|---|
| Submission | 03/23/2026 05:30 (15 days ago) |
|---|
| Moderation | 04/06/2026 09:48 (14 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 355485 [Free5GC 4.2.0 NGSetupRequest denial of service] |
|---|
| Points | 19 |
|---|