Free5GC 4.1.0 AMF internal/gmm/handler.go HandleRegistrationComplete denial of service

Summaryinfo

A vulnerability identified as problematic has been detected in Free5GC 4.1.0. Affected by this vulnerability is the function HandleRegistrationComplete of the file internal/gmm/handler.go of the component AMF. The manipulation leads to denial of service. This vulnerability is traded as CVE-2026-4531. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.

Detailsinfo

A vulnerability was found in Free5GC 4.1.0 and classified as problematic. This issue affects the function HandleRegistrationComplete of the file internal/gmm/handler.go of the component AMF. The manipulation with an unknown input leads to a denial of service vulnerability. Using CWE to declare the problem leads to CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. Impacted is availability.

It is possible to read the advisory at github.com. The identification of this vulnerability is CVE-2026-4531. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1499 according to MITRE ATT&CK.

Applying the patch 52e9386401ce56ea773c5aa587d4cdf7d53da799 is able to eliminate this problem. The bugfix is ready for download at github.com.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2026-14264). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Name

Version

License

Website

CPE 2.3info

CPE 2.2info

CVSSv4info

VulDB Vector: 🔒
VulDB Reliability: 🔍

CVSSv3info

VulDB Meta Base Score: 5.3
VulDB Meta Temp Score: 5.1

VulDB Base Score: 5.3
VulDB Temp Score: 5.1
VulDB Vector: 🔒
VulDB Reliability: 🔍

CVSSv2info

AVACAuCIA
💳💳💳💳💳💳
💳💳💳💳💳💳
💳💳💳💳💳💳
VectorComplexityAuthenticationConfidentialityIntegrityAvailability
UnlockUnlockUnlockUnlockUnlockUnlock
UnlockUnlockUnlockUnlockUnlockUnlock
UnlockUnlockUnlockUnlockUnlockUnlock

VulDB Base Score: 🔒
VulDB Temp Score: 🔒
VulDB Reliability: 🔍

Exploitinginfo

Class: Denial of service
CWE: CWE-404
CAPEC: 🔒
ATT&CK: 🔒

Physical: No
Local: No
Remote: Yes

Availability: 🔒
Status: Not defined

EPSS Score: 🔒
EPSS Percentile: 🔒

Price Prediction: 🔍
Current Price Estimation: 🔒

0-DayUnlockUnlockUnlockUnlock
TodayUnlockUnlockUnlockUnlock

Threat Intelligenceinfo

Interest: 🔍
Active Actors: 🔍
Active APT Groups: 🔍

Countermeasuresinfo

Recommended: Patch
Status: 🔍

0-Day Time: 🔒

Patch: 52e9386401ce56ea773c5aa587d4cdf7d53da799

Timelineinfo

03/21/2026 Advisory disclosed
03/21/2026 +0 days VulDB entry created
03/22/2026 +1 days VulDB entry last update

Sourcesinfo

Product: github.com

Advisory: 792
Status: Confirmed
Confirmation: 🔒

CVE: CVE-2026-4531 (🔒)
GCVE (CVE): GCVE-0-2026-4531
GCVE (VulDB): GCVE-100-352319
EUVD: 🔒

Entryinfo

Created: 03/21/2026 08:52
Updated: 03/22/2026 11:28
Changes: 03/21/2026 08:52 (57), 03/22/2026 11:28 (1)
Complete: 🔍
Submitter: shovon0203
Cache ID: 216::103

Submitinfo

Accepted

  • Submit #774073: Linux Foundation free5GC 4.1.0 Denial of Service (by shovon0203)

Be aware that VulDB is the high quality source for vulnerability data.

Discussion

No comments yet. Languages: en.

Please log in to comment.

◂ PreviousOverviewNext ▸

Want to know what is going to be exploited?

We predict KEV entries!