{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2026-106805", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2026-11-02T16:32:24.655Z", "dateReserved": "2026-10-07T00:00:00.000Z", "datePublished": "2026-11-02T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-11-02T16:32:24.655Z"}, "descriptions": [{"lang": "en", "value": "A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. When the SMF does not receive a PFCP Session Establishment Response from the UPF, allocated UE IP address resources are not properly released. Repeated failed session establishment attempts can therefore exhaust the UE IP address pool, preventing new UEs from establishing PDU sessions and resulting in denial of service."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://github.com/free5gc/free5gc/issues/1162"}, {"url": "https://github.com/free5gc/smf/pull/236"}, {"url": "https://gist.github.com/hackeryounow/484987c16806c76dd53a8a87355dd0c2"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}}, "dataVersion": "5.2"}

{}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "[email protected]"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. When the SMF does not receive a PFCP Session Establishment Response from the UPF, allocated UE IP address resources are not properly released. Repeated failed session establishment attempts can therefore exhaust the UE IP address pool, preventing new UEs from establishing PDU sessions and resulting in denial of service."}], "id": "CVE-2026-106805", "lastModified": "2026-11-02T17:17:33.617", "metrics": {}, "published": "2026-11-02T17:17:33.617", "references": [{"source": "[email protected]", "url": "https://gist.github.com/hackeryounow/484987c16806c76dd53a8a87355dd0c2"}, {"source": "[email protected]", "url": "https://github.com/free5gc/free5gc/issues/1162"}, {"source": "[email protected]", "url": "https://github.com/free5gc/smf/pull/236"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Received"}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "4.2.3"}}], "enrichment": {"confidence": 85.0, "confidence_source": "inferred", "scores": [{"score": 85.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "n/a", "source": "cna", "vendor": "n/a"}, "product": "free5gc", "vendor": "free5gc"}], "created": "2026-11-02T17:30:17.271816+00:00", "title": "Resource Exhaustion During PFCP Session Establishment in Free5GC Leading to Denial of Service", "updated": "2026-11-02T18:00:16.520070+00:00", "vendors": ["free5gc", "free5gc$PRODUCT$free5gc"], "weaknesses": ["CWE-400"]}