CVE-2026-82552: Denial of Service in Linux Foundation Magma

This vulnerability in Linux Foundation Magma 1.9.0 involves a flaw in the gNB Termination Handler component (file tasks/ngap/ngap_amf.c) that allows an attacker to cause a denial of service condition remotely. The exact nature of the flaw is unspecified, but it leads to service disruption. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity. Exploit code has been publicly disclosed, increasing the risk of exploitation. There is no vendor-provided patch or mitigation information at this time.

Successful exploitation results in denial of service, causing the affected Magma component to become unavailable or unresponsive. This can disrupt network functions relying on the gNB Termination Handler. The attack requires no user interaction and can be performed remotely with low complexity. There are no indications of privilege escalation or data compromise from the available information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting network access to the affected component to trusted sources only and monitor for unusual activity related to the gNB Termination Handler. Avoid exposure of the vulnerable service to untrusted networks where possible.