CVE-2026-75894: Reachable assertion at ranap_handle_co_dt()
Published Sep 18, 2026
·Updated
In osmo-iuh from 1.10.0 through 1.14.5 a reachable assertion was found in the ranaphandlecodt() function via a arbitrarily sized NAS-PDU that leads to process crash and remote denial of service.
Affected Software
1 affected component
osmo-iuh>=1.10.0<=1.14.5
Event History
Sep 18, 2026
CVE Published
via MITRE·06:52 PM
Data Sourced
via MITRE·06:52 PM
DescriptionWeakness
Frequently Asked Questions
1
Who can trigger the denial of service?
A remote attacker able to send an arbitrarily sized NAS-PDU to the affected ranap_handle_co_dt() processing path can trigger the reachable assertion and crash the process.
2
Which releases are affected?
osmo-iuh versions 1.10.0 through 1.14.5 are affected.