Description

An issue was discovered in Open5GS 2.7.5-49-g465e90f, when processing a PFCP Session Establishment Request (type=50), the UPF crashes with a reachable assertion in `lib/pfcp/context.c` (`ogs_pfcp_object_teid_hash_set`) if the CreatePDR?PDI?F-TEID has CH=1 and the F-TEID address-family flag(s) (IPv4/IPv6) do not match the GTP-U resource family configured for the selected DNN (Network Instance), resulting in a denial of service.

INFO

Published Date :

2025-12-18T00:00:00.000Z

Last Modified :

2025-12-18T18:42:55.350Z

Source :

mitre
AFFECTED PRODUCTS

The following products are affected by CVE-2025-65559 vulnerability.

Vendors Products
Open5gs
  • Open5gs
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-65559.

CVSS Vulnerability Scoring System