CVE-2026-37227 Details
Description
FlexRIC v2.0.0 contains reachable assert(0) calls in stub message handlers for whitelisted but unimplemented E2AP message types in the near-RT RIC. A remote unauthenticated attacker can send a decodable E2AP PDU of such a type (e.g., E2nodeConfigurationUpdate) to crash the near-RT RIC process (port 36421) via SIGABRT. The message passes whitelist validation but triggers an unconditional assertion in the handler.
A denial-of-service vulnerability has been identified in FlexRIC version 2.0.0. The issue arises from reachable assert(0) calls in the near-RT RIC's stub message handlers for E2AP message types that are whitelisted but not implemented. A remote, unauthenticated attacker can exploit this vulnerability by sending a decodable E2AP PDU of such a type, such as E2nodeConfigurationUpdate, to crash the near-RT RIC process on port 36421. The message successfully passes whitelist validation but triggers an unconditional assertion failure in the handler, causing the process to abort and terminate the service.
No upstream fix is available. Operators are advised to restrict E2 SCTP access to trusted nodes. Additionally, stub handlers should be modified to return protocol errors or ignore unsupported messages instead of asserting.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Jun 1, 2026CISA-ADP
Assessed Jun 1, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/MinamiKotor1/oran-security-advisories-zhongnan-luo/blob/main/advisories/CVE-2026-37227.md | [email protected] | AdvisoryTechnical Description |
| https://gitlab.eurecom.fr/mosaic5g/flexric | [email protected] | ProductVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-617 | Reachable Assertion | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| EURECOM FlexRIC | >= 2.0.0, <= 6a595d8b |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 22, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 1, 2026 | CVE Modified | CISA-ADP |
| Jun 1, 2026 | New CVE Received | [email protected] |