PT-2026-68078

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The gtp1u send echo resp function fails to check the return value of skb pull data. When processing an echo request between 16 and 19 bytes, the pull request for 20 bytes fails and retur...

CVE-2023-23846: Allocation of Resources Without Limits or Throttling

Due to insufficient length validation in the Open5GS GTP library versions prior to versions 2.4.13 and 2.5.7, when parsing extension headers in GPRS tunneling protocol GPTv1-U messages, a protocol payload with any extension header length set to zero causes an infinite loop. The affected process...