CVE-2026-82551: State Issue in Linux Foundation Magma

This vulnerability affects Linux Foundation Magma 1.9.0 in the NGSetup Handler component, specifically in an unknown function of the file ngap_amf_handlers.c. The flaw allows remote attackers to manipulate the state, potentially causing unintended behavior. The vulnerability has a CVSS 4.0 base score of 6.9 (medium severity), indicating it is remotely exploitable with low attack complexity and no privileges or user interaction required. Public exploit code exists, but no official fix or mitigation has been disclosed by the vendor.

Successful exploitation can lead to a state issue in the affected component, which may cause instability or unexpected behavior in the Magma system. The vulnerability is remotely exploitable without authentication, increasing the risk of attack. However, the exact impact beyond the state issue is not detailed in the available information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor vendor communications for updates. In the meantime, consider restricting network access to the affected service if feasible to reduce exposure.