PatchTheCVECVE-2026-25501: free5GC SMF provides Session Management Function for free5GC, an open-source project for 5th generation (5G) m
CVE-2026-25501 is a high-severity flaw (CVSS 7.5) affecting smf. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
free5GC SMF provides Session Management Function for free5GC, an open-source project for 5th generation (5G) mobile core networks. In versions up to and including 1.4.1, SMF panics due to nil pointer dereference and the SMF process terminates. This is triggered by a malformed PFCP SessionReportRequest on the SMF PFCP (UDP/8805) interface. No known upstream fix is available, but some workarounds are available. ACL/firewall the PFCP interface so on
Why this priority
- High severity
- Public exploit reference
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.5 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.4% (top 70%) |
| CISA exploited list | No |
| Weakness | CWE-476 |
| Published | 2026-02-24 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-25501?
smf: upgrade to newer than 1.4.1. Exact commands for each OS are on this page.
Is CVE-2026-25501 being exploited?
CVE-2026-25501 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-25501 affect?
CVE-2026-25501 affects smf. Severity is high (CVSS 7.5). free5GC SMF provides Session Management Function for free5GC, an open-source project for 5th generation (5G) mobile core networks. In versions up to and including 1.4.1, SMF panics due to nil pointer dereference and the SMF process terminat
How urgent is CVE-2026-25501?
Priority 44/100. High severity; Public exploit reference; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2026-26025 HIGH 7.5 UPGRADE free5GC SMF provides Session Management Function for free5GC, an open-source project for 5th generation (5G) m
- CVE-2026-26024 HIGH 7.5 UPGRADE free5GC SMF provides Session Management Function for free5GC, an open-source project for 5th generation (5G) m
- CVE-2025-69232 HIGH 7.5 UPGRADE UPGRADE free5GC is an open-source project for 5th generation (5G) mobile core networks
- CVE-2023-47346 HIGH 7.5 DOWNGRADE DOWNGRADE Buffer Overflow vulnerability in free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0 allows attackers to cause a denial of
- CVE-2012-5903 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 2.0.2 allows remote attackers to injec