CVE-2026-92150: F´: GenericHub Malformed Buffer Assertion DoS
F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.2.0, Svc::GenericHub fromBufferDriverhandler deserialization is vulnerable because the receive handler uses FWASSERT for externally influenced deserialization status and type validation and permits a command payload size subtraction to underflow. When an unauthenticated inter-processor hub peer sends a truncated buffer, an invalid HubType, or a header-only command-dispatch payload, malformed hub traffic aborts or resets the process, causing denial of service. This issue is fixed in version 4.2.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
F´ (F Prime)to a version that resolves this vulnerability.Fixed in 4.2.0
Event History
Frequently Asked Questions
Which deployments are exposed to this denial of service?
Deployments using F Prime versions before 4.2.0 with Svc::GenericHub processing traffic from an unauthenticated inter-processor hub peer are exposed. The affected receive path handles externally influenced hub-buffer deserialization.
What does an attacker need to send to trigger the issue?
An unauthenticated hub peer can send a truncated buffer, a buffer with an invalid HubType, or a header-only command-dispatch payload. These malformed inputs can cause an assertion failure or a payload-size subtraction underflow that aborts or resets the process.
Is authentication required to exploit this issue?
No. The reported attack vector is network-accessible with no privileges or user interaction required, and the vulnerable peer is described as unauthenticated.
How can the issue be remediated?
Upgrade F Prime to version 4.2.0, which fixes the issue. The provided data does not describe an alternative mitigation for deployments that cannot immediately upgrade.