CVE-2026-82550: Linux Foundation Magma NGSetupRequest input validation
A security flaw has been discovered in Linux Foundation Magma 1.9.0. This impacts an unknown function of the component NGSetupRequest Handler. Performing a manipulation of the argument NG-IoT-DefaultPagingDRX results in improper input validation. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What access does an attacker need to exploit this issue?
The issue is remotely exploitable over the network and does not require privileges or user interaction.
What is the known impact of successful exploitation?
The supplied severity vector indicates a low availability impact, with no stated confidentiality or integrity impact.
Is exploit code available?
Yes. The exploit has been publicly released and may be used in attacks.
Which deployment is explicitly identified as affected?
Linux Foundation Magma 1.9.0 is identified as impacted, specifically its NGSetupRequest Handler processing of the NG-IoT-DefaultPagingDRX argument.
Is a vendor response or fix reported?
No response from the project is reported despite an early issue report. The provided data does not identify a patch or workaround.