This vulnerability in OpenAirInterface CN5G AMF (oai-cn5g-amf) up to version 2.0.0 is due to improper file descriptor handling for closed connections. An attacker can exploit this by repeatedly establishing SCTP connections with the N2 interface, leading to resource exhaustion and a Denial of Service condition. The CVSS 3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, and high impact on availability.

Successful exploitation results in Denial of Service (DoS) by exhausting file descriptors through repeated SCTP connection attempts on the N2 interface. This disrupts the availability of the affected OpenAirInterface CN5G AMF component. There is no impact on confidentiality or integrity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround is currently documented. Until a patch is available, limit exposure of the N2 interface to untrusted networks and monitor for unusual SCTP connection patterns to mitigate potential DoS attempts.