CVE-2025-65566

⚡ A single malformed PFCP Session Report Response can crash the entire UPF process! Think of it like a restaurant kitchen that shuts down if a waiter serves a wrong dish—absolute chaos ensues! Imagine a restaurant where a minor mistake, like serving a dish without essential ingredients, causes the entire kitchen to go into disarray. Similarly, this vulnerability causes the UPF to panic and crash if it receives a poorly formatted message. An attacker can repeatedly exploit this flaw to crash the UPF, disrupting user-plane services for all connected clients. This means data interruptions, poor user experiences, and potentially loss of service—definitely not something you'd want in your network!

An attacker can repeatedly exploit this flaw to crash the UPF, disrupting user-plane services for all connected clients. This means data interruptions, poor user experiences, and potentially loss of service—definitely not something you'd want in your network! To mitigate this issue, immediately update to the patched version of the omec-project UPF. Ensure that input validation for PFCP Session Report Responses is enforced, rejecting any malformed messages before they reach the handler. Regularly monitor your systems for any unusual activity to catch potential exploitation attempts early. This is fixable! By following these steps, you'll have your UPF protected in no time. 🛡️