CVE-2026-82547: Improper Authentication in Linux Foundation Magma

This vulnerability affects Linux Foundation Magma 1.9.0 in an unspecified function within the file tasks/amf/amf_fsm.cpp, specifically in the Registration Complete Message Handler component. The issue results in improper authentication (CWE-287), enabling remote attackers to potentially bypass authentication controls. The vulnerability has a CVSS v3.1 base score of 6.9 (medium severity) with network attack vector, no privileges required, no user interaction, and partial impact on integrity and availability. Public exploit code is available, but no confirmed exploitation in the wild has been documented.

The vulnerability allows remote attackers to bypass authentication mechanisms in Magma 1.9.0, potentially leading to unauthorized access or actions within the affected component. The impact is rated medium severity, with partial loss of integrity and availability. There is no indication of confidentiality impact or privilege escalation. No active exploitation in the wild has been confirmed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix links are provided, users should monitor Linux Foundation advisories for updates. Until a fix is available, consider restricting network access to the affected component to trusted sources if feasible.