CVE-2026-1976: Free5GC SMF SessionDeletionResponse null pointer dereference
A weakness has been identified in Free5GC up to 4.1.0. Affected is the function SessionDeletionResponse of the component SMF. This manipulation causes null pointer dereference. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. It is suggested to install a patch to address this issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1976?
CVE-2026-1976 is classified as a critical vulnerability due to the potential for remote exploitation leading to application crashes.
How do I fix CVE-2026-1976?
To fix CVE-2026-1976, upgrade Free5GC to version 4.1.1 or later, where the vulnerability has been patched.
What are the consequences of exploiting CVE-2026-1976?
Exploiting CVE-2026-1976 can lead to denial of service by causing a null pointer dereference in the SessionDeletionResponse function.
Which versions of Free5GC are affected by CVE-2026-1976?
CVE-2026-1976 affects Free5GC versions up to and including 4.1.0.
Can CVE-2026-1976 be exploited remotely?
Yes, CVE-2026-1976 can be exploited remotely, which increases its risk profile significantly.